last executing test programs: 1m6.859368735s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x69b, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x3f00000000000000, 0x40840}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @lsm=0x1b}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'batadv0\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000440)) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) 1m6.653137529s ago: executing program 2 (id=6): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40042, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000004c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000005c0), 0x40000000000032a, 0x0) recvmmsg(r3, &(0x7f0000000600), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000680)='mounts\x00') pread64(r5, &(0x7f00000006c0)=""/237, 0xed, 0x4eb) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000040)="6617d464ea859f7a8448f45773cfd2703864a41e1daa71bcfa8ff2bd9953e2b8fa7e1e26e2427f1056fa281b5867d8f3eccaf609c1a1bbf97d33b14a99c2c6de54c19e013fdcec6306fbf91ab519df34a80f809b0735178c5fd8086da4e94edb1d0a035a354cf9413f0a518aba292b33c02e034ef1fd7e92fc52d9d759a17a5bf836503c5930a3c7403de0d72c0ab1cf9e6db7c09effc7c5bfcde7d92d8f122a209f142119408c31eddd9ff42369c18859be8698bdf1eeb17997ba04dc2ddac024e71b33a08586461b206b7ae243542919cdf8", 0xd3) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000800)=0x237a, 0x4) sendmmsg$inet6(r6, &(0x7f0000000840)=[{{&(0x7f0000000880)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{&(0x7f00000009c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000a80)=""/99, 0x63}], 0x1, &(0x7f0000000b00)=""/58, 0x3a}, 0xa3}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)=""/17, 0x11}], 0x1, &(0x7f0000000bc0)=""/178, 0xb2}, 0xe}, {{&(0x7f0000000c80)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)=""/52, 0x34}, 0x7}], 0x4, 0x122, 0x0) syz_open_procfs(r2, &(0x7f0000000d80)='net/anycast6\x00') r7 = syz_open_dev$usbfs(&(0x7f0000000dc0), 0x75, 0x109301) socket$inet_udp(0x2, 0x2, 0x0) ioctl$USBDEVFS_RESETEP(r7, 0x80045503, &(0x7f0000001240)={0x7}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = dup(r8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000001280)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0xd, 0x2, 0xf}}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m5.76627689s ago: executing program 2 (id=12): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0xc) connect$x25(r0, &(0x7f0000000880), 0x12) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000040000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000007c8be60000000000000000bb000029452fc5a4b38b2c8e75852cdcb7", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1e, 0x11, &(0x7f0000000b40)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[r1], 0x0, 0x0, 0x40000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000000000000091110a400000000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6, 0xd}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x5a}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}}, 0x2000400c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbf7000fbdbdf25100000000e0001006e657464657673696d0000000f0006bd67867464657673696d30000008000b0000000000060011000600000008001300030000000500140000000000"], 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x20004814) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001340)={&(0x7f00000011c0)=ANY=[@ANYBLOB="48020000", @ANYRES16=r5, @ANYBLOB="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"], 0x148}}, 0x408c1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) syz_usb_connect$uac2(0x5, 0x0, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x6, 0xc, &(0x7f0000000e00)=ANY=[], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000f00)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x1b7b, &(0x7f0000000280)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000003c0)={0xc, &(0x7f0000000400)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x3}}], 0x38) socket$packet(0x11, 0x2, 0x300) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000480)="9414d36ce354274d607339851f577b1cb334b89fe633007b8922b48fddff8cd9a1f83008c58ef13a9ce98c7a6eb24215c30e87059769d088c841323d63a5d164579b61ad38e531b0cd983cc9f45b9e8bc65265deed5393ab72f7f404674e87a3fc6da117baaddc8849a782fdf023253bdcdfec2fdd68107a52e1329cd596cea7d0dd223d41be0cf8cc069a71a6fc7beb23b297e5649b281d71a92affcbc512cc8f536e50faab2dae22e0d5c74d6a6d806b851bee4a09825bea3199aa81331aadfa", 0xc1}, {&(0x7f0000000580)="fec849973e37359eacc77ea1b5c68316283b7b89523ca3917a1b337eddfe70572e3f0de25a881c8e6d094a9e78e24838f1bd44a1b49c0233070fb9cc18ea13cbbecb60899a54690e11ee55390ea23a6c8630c07d6fd9ed5bba1f0945d306e4b90e700f627d1582d3ad9131c95fe33d20668c26ced660e807eee4467bd22477ec82113ccc530996613df735487f4fed965f512acf46030d026205b824e23318a6e35d8a53e5a9d8faa72041e52eaeea14315789", 0xb3}, {&(0x7f0000000640)="df68215970b09126b38ff3ad9fd7f86685b6", 0x12}, {&(0x7f0000000680)="3bcd83e1975d73102af03ab709e44dffd08d8c646a0a989f6664bc61755513f7ae52fbd3b8e51e0b47c23c762cff6f6423c64ad996bd4cd9bb6700a5bf472e4c1356e4e443e1cc2a3283745d8bef22e57404779019e7aecb7546af03db28f99c83ecd76966c02baa98ddbfa93a1e1f8c435ce3b9e23d146dc6ac6fb8777a14becfedcfc0b7b9929805ab59316bcd36ee5e8fe30f59549d6de6cc83a6b340b593cee72f22a655a499549142b9365f", 0xae}, {&(0x7f0000000740)="4f8cc0f5c4bfb84ddba6bff329b8f845d72126286edacc181cfe8081a928b8c95d52bcd1eb869e8b4380892d59dd226b589ad2fedae3d914759938b6f934f9e2de5fb7b0a3229126ff288c4e1b636e33bf192c4af8c33568182aa4e85b182e06d62f301a7d8e24dec22d04ab6482d9c523f36b51be9e44115d58c1c9c3dcb7f41bf4138e65c2a654ee443a665024aa4002b27ab6ffcec72c9c999d7a5615d51cf079212602ee", 0xa6}], 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, &(0x7f0000000d00)="000000000000000002", 0x0}, 0x50) 1m5.072265897s ago: executing program 2 (id=21): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2}, 0x113011, 0x0, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3018000, &(0x7f00000000c0)={[{@sysvgroups}]}, 0x4, 0x521, &(0x7f0000000640)="$eJzs3d9rZFcdAPDvvcnEZDc1UxVZC7bFVnaL7kzSWI0ibQXRp4Ja39eYTELIJBMyk7oJRVP8AwQRFfwDfBF88FGQ/gkiFPRdVBTRrT7qXrkzN5ofM8mYmexsJ58PnMw598f5nnPJ3Lk/DvcGcG09GxGvRsRERLwQEXPF9LRIcdhJ+XLvPnhzJU9JZNnrf0siKaYd1ZWXJyPiZrHadER87csR30zOxm3uH2wu1+u13aJcbW3tVJv7B3c3tpbXa+u17cXFhV9ExEtL81lhoH6WI+LlL/7ph9/76Zde/tUnv/X7e3+58+28WZ//cKfdEbEyUIAeOnWX2tviSL6Ndq8i2Ijk/SlNjLoVAAD0Iz/G/0BEfKx9/D8XE+2jOQAAAGCcZK/Mxr+SiAwAAAAYW2lEzEaSVoqxALORppVKZwzvh+JGWm80W59Ya+xtr+bzIspRStc26rX5YqxwOUpJXl4oxtgelV88VV6MiCcj4gdzM+1yZaVRXx31xQ8AAAC4Jm4+c/L8/59zaTsPAAAAjJlyzwIAAAAwLpzyAwAAwPhz/g8AAABj7SuvvZan7Og93qtv7O9tNt64u1prbla29lYqK43dncp6o7Hefmbf1kX11RuNnU/F9t79aqvWbFWb+wf3thp72617GydegQ0AAAA8Qk8+8/bvkog4/NxMO0XxHECAE/446gYAwzQx6gYAIzM56gYAI1O6cAl7CBh3yQXzzw7e6VwrjF9fTXsAAIDhu/2Rs/f/p4p5F18bAN7LjPUBgOvn5N29mZG1A3j0SpcdAXhr2C0BRuX9xWev0T49H97Rx/3/zjWGLLtUwwAAgKGZbackrRTnALORppVKxBPxMCtHKVnbqNfmi3m/nSu9Ly8vtNdMLhwzDAAAAAAAAAAAAAAAAAAAAAAAAAB0ZFkSGQAAADDWItI/J+2n+Ufcnnt+9uTVgVNv/frJ6z+6v9xq7S5ETCV/n8snTUVE68fF9BczrwQAAACA0ZrJ/3TO04vPhVE3CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBx8+6DN1eOUt8rTQwe969fiIhyt/iTMd3+nI5SRNz4RxKTx9ZLhhM+Dt+KiFvd4ifxMMuyctGKbvFnrjh+ub1pusdPI+LmEOLDdfZ2vv95tdv3L41n25/dv3+TRRpU7/1f+t/930SP/c8Tp8q9PPXOz6s9478V8dRk9/3PUfykE/9EiLzwXJ99/MbXDw66zjhWZbf4x2NVW1s71eb+wd2NreX12npte3Fx4dNLn1l6aWm+urZRrxV/u4b5/kd/+fC8/t/oEb98sv9ntv/zffU+i3+/c//BBzuFUrf4d57r/vt7q0f8tPjt+3iRz+ffPsofdvLHPf2z3zx9Xv9Xe/R/+oL+3+mr//HZF7763T90nXNmawAAj0Jz/2BzuV6v7Z6Tme5jmf8rEzFoPa8MtT2PQyYuXmb6MWnqVWSy73T+HwerZ8DVz2SyQVafjCE0Y+rM93QiLlthEnGY19XnPyQAADBm/nfQf94dJAAAAAAAAAAAAAAAAAAAAOAqXfKxZNMR0ffCp2MejqarAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn+k8AAAD//xwK0hs=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x5a) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @b}}) rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffeffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000280)={0x180801400, &(0x7f0000000300)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r1, 0x21, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x40200) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x800}, &(0x7f0000000180)=0xc) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f00000001c0)=0x9, 0x4) 1m4.229726037s ago: executing program 2 (id=28): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8, 0x830a}, 0x0, 0x8, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000540)={r0, &(0x7f00000000c0)='pie\x00', 0x2000, &(0x7f0000000100)={@align=0x9, {0xc, 0x5f, 0x1, 0x3ff}}, 0x0, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000500)=0x4}) r2 = openat(r1, &(0x7f0000000200)='./file1\x00', 0x10b042, 0xd) write$P9_RVERSION(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r6 = socket(0x1d, 0x2, 0x6) r7 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080)={0x90000001}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8}]}}]}, 0x38}}, 0x20040001) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setreuid(0x0, 0xee00) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0x40}, 0x1c50, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = fsopen(&(0x7f0000000600)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) getsockopt$bt_hci(r10, 0x11e, 0x2, 0x0, &(0x7f0000000640)=0xffffffffffffff84) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./dev/console\x00', 0x1, 0x0) write$UHID_INPUT(r12, 0x0, 0x0) truncate(&(0x7f0000000780)='./bus\x00', 0x9471) finit_module(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r10, 0x8983, &(0x7f00000007c0)) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100001010000000000000040000000000000000000000032dbe90ad1ac85000000000000000000000000000000ffffac1414bb000103944e230005000000003a2300000149df3b6861f9dcccd5951a3be373cdff43d8150d0e09b52336480c58cc858035e15f0d3abb7f498b9188a9b4b268c3d5f858744e8239438264d82cfb1ef195e464b8282758133c9b49c7c132ae4ea7d8e8b7b9fff07523cef5ae2657208554111131063c592b9131a02f8d1017113208babbae76619f75ecaf11575b309350874984e7f453b9e88c8fb75beabdb7783c86a1d6e40dabfc95d581fa9f58dc302cdffd46896a419e7b35dc3b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac141414000000000000000000000000000000000000000009000000000000000700000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffffa90e000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000000000000a0001fd2000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001f40)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_emit_ethernet(0xed, &(0x7f0000002340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3a86dd6cf7011e00b72b01fc000000000000000000000000000000ff020000000000000000000000000001"], 0x0) 1m3.958090724s ago: executing program 2 (id=34): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = timerfd_create(0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)={0x6553f100, 0x3b023380}) timerfd_settime(r0, 0x1, &(0x7f0000000280)={{}, {0x6553f100, 0x3b9a06b0}}, 0x0) read(r0, &(0x7f00000002c0)=""/8, 0x8) clock_adjtime(0x0, &(0x7f00000004c0)={0x7, 0x0, 0x3ffffe, 0x2, 0xffffffffe, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x3, 0x0, 0x4, 0x1020000000, 0x14c8, 0xa000000, 0x0, 0xffffffffffffffff, 0x0, 0x771, 0x20d, 0xfffffffffffffffd, 0x3}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) 1m3.883137155s ago: executing program 32 (id=34): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = timerfd_create(0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)={0x6553f100, 0x3b023380}) timerfd_settime(r0, 0x1, &(0x7f0000000280)={{}, {0x6553f100, 0x3b9a06b0}}, 0x0) read(r0, &(0x7f00000002c0)=""/8, 0x8) clock_adjtime(0x0, &(0x7f00000004c0)={0x7, 0x0, 0x3ffffe, 0x2, 0xffffffffe, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x3, 0x0, 0x4, 0x1020000000, 0x14c8, 0xa000000, 0x0, 0xffffffffffffffff, 0x0, 0x771, 0x20d, 0xfffffffffffffffd, 0x3}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) 4.562396421s ago: executing program 3 (id=665): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 4.430637514s ago: executing program 3 (id=669): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000780)={r0, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10) (fail_nth: 1) 4.286776748s ago: executing program 3 (id=672): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) ioctl(0xffffffffffffffff, 0xc0184d03, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x800000a, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x1, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000c00)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc/sys/net/ipv4/tcp_ehash_entries\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xffffe000) r2 = socket(0x2b, 0x2, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRESDEC=r1, @ANYRESOCT=r2, @ANYRES32=r0], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000001200)='mounts\x00') pread64(r3, &(0x7f0000001880)=""/4079, 0xfef, 0x66) 4.22290941s ago: executing program 3 (id=674): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'vlan1\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x800, &(0x7f0000000700)={0x11, 0x3, r2, 0x1, 0xfd, 0x6, @random="0000f91850da"}, 0x14) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x15) unshare(0x22020400) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f00000001c0)=0x9) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xc0a41, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x2100, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000580)={'pim6reg\x00', @random="2de133d48470"}) write$tun(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="600008000700000000031400090045f0002c00000000002f907800000000ffffffffa20022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000c83b3a37fc4700009078"], 0x3a) truncate(&(0x7f00000005c0)='./bus\x00', 0x8) write(0xffffffffffffffff, &(0x7f00000000c0)='-:s', 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40010002) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x9, 0x96, 0x83, 0xffffffff}) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000002880)=0x0, &(0x7f00000028c0)=0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x400082) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002c00)={r4, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002940)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000002980)=[0x0, 0x0, 0x0], &(0x7f0000000400), 0x0, 0x32, &(0x7f0000002a00)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000002a40), &(0x7f0000002a80), 0x8, 0x38, 0x8, 0x8, &(0x7f0000002ac0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x16, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @func, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @generic={0x1, 0x6, 0x8, 0x5, 0x6}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000001880)=""/4096, 0x40f00, 0x28, '\x00', r7, @fallback=0x14, r4, 0x8, &(0x7f0000002900)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, r8, r4, 0x6, &(0x7f0000002c40), &(0x7f0000002c80)=[{0x0, 0x3, 0x3, 0x1}, {0x4, 0x3, 0x5, 0x5}, {0x2, 0x4, 0x5, 0x7}, {0x4, 0x5, 0x9, 0x7}, {0x2, 0x5, 0xd, 0x6}, {0x5, 0x3, 0xd}], 0x10, 0x4}, 0x94) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x501, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000500)=0x5) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r9, 0x80083313, 0x0) syz_open_dev$usbfs(0x0, 0x1012, 0x408000) fsync(r4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000080)={0x20000004}) 4.101494672s ago: executing program 3 (id=675): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x60, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x60, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) mq_open(&(0x7f0000000780)='eth0\x00', 0x803, 0x40, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf250f00000004000380240007800c00030006000000000000000c0004000b000000000000000800020083"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) capset(&(0x7f00000007c0)={0x19980330}, &(0x7f0000000800)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x20002}) inotify_init() (async) r2 = inotify_init() fgetxattr(r2, &(0x7f0000000900)=@known='system.posix_acl_access\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000880)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x73a, 0x400, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x2, 0x6, 0x0, 0x80, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x5b}, 0x100035, 0x0, 0x1, 0x2, 0x0, 0x1, 0x85, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f0000000a00)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000a40)=0x0) timer_settime(r4, 0x1, &(0x7f0000000a80)={{0x77359400}, {0x77359400}}, &(0x7f0000000ac0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x1a0001) socket(0x23, 0x1, 0xfffffff5) mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000b80)='./trace\x00', &(0x7f0000000bc0)='tracefs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000b80)='./trace\x00', &(0x7f0000000bc0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./trace/error_log\x00', 0x2, 0x0) writev(r5, &(0x7f0000000c40)=[{&(0x7f0000000c80)="ab", 0x1}], 0x1) 3.867946208s ago: executing program 3 (id=681): set_mempolicy(0x4005, &(0x7f0000000100)=0x7e, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./tracing\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.807396629s ago: executing program 33 (id=681): set_mempolicy(0x4005, &(0x7f0000000100)=0x7e, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./tracing\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.317620015s ago: executing program 1 (id=695): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) ioctl(0xffffffffffffffff, 0xc0184d03, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x800000a, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x1, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000c00)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc/sys/net/ipv4/tcp_ehash_entries\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xffffe000) r2 = socket(0x2b, 0x2, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRESDEC=r1, @ANYRESOCT=r2, @ANYRES32=r0], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x3810744, &(0x7f0000000300)={[{@nomblk_io_submit}, {@noinit_itable}, {@mblk_io_submit}, {@jqfmt_vfsv1}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@delalloc}, {@usrquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@inode_readahead_blks}]}, 0x1, 0x467, &(0x7f0000000500)="$eJzs3M9vFFUcAPDvzG75LVsRf4CgVTQ2/mhpQeWgB40mHjQx0QMea1sIslBDayKEaDUGj4bEu/Fo4l/gyZNRTyZ61LshIUpMQC+umd2Z0l12C2233cp+PsnAeztv571vZt7M2/cYAuhbQ9kfScSOiPg1IiqNbHOBocZf166cn/z7yvnJJGq1N/5I6uWuXjk/WRQtvrc9zwynEeknSV5Js9mz505OVKvTZ/L86Nypd0dnz5576sSpiePTx6dPjx85cvjQ2LPPjD/dlTizNl3d+8HMvj2vvHXxtcmjF9/+4eusvffsb+xfHEe3DGWB/1mra933aLcr67F/a9fjTMq9bg23qhQR2ekaqPf/SpTi+smrxMsf97RxwJrK7tmbO++erwG3sSR63QKgN4oHffb7t9jWaeixIVx+ofEDKIv7Wr419pQjzcsMrGH9QxFxdP6fL7ItWuYham3mDQAAVuvbbPzz5I3jv/raSKPI89vzspWIGIyIOyNiV0TcFRG7I+LuvOy9EXHfMutvXRq6cfyZXlppbLciG/89l69tNY//itFfDJby3B31+AeSYyeq0wcjYmdEDMfA5iw/1u7gxSFe+vmzTvUvHv9lW1Z/MRbMD3Kp3DJBNzUxN9GtQenljyL2ltvFnyysBGTXwp6I2Lu8Q+8sEice/2pfp0I3j38JXVhnqn0Z8Vjj/M9HS/yFZOn1ydEtUZ0+OFpcFTf68acLr3eqf1Xxd0F2/rc1X/8tJSp/JYvXa2eXX8eF3z7t+JuyvMLrf1PyZn3NelP+2fsTc3NnxiI2Ja/W802fj1//bpEvymfxDx9o3/935d/J4r8/IrKLeH9EPBARD+bn7qGIeDgiDiwR//cvPvJOp30b4fxPtb3/LVz/g83nf/mJ0snvvulU/63d/w7XU8P5J/X73010bs6WvMRKr2YAAAD4/0kjYkck6chCOk1HRhr/Xn53bEurM7NzTxybee/0VOMdgcEYSIuZrsqi+dCxZD4/YiM/ns8VF/sP5fPGn5e21vMjkzPVqR7HDv1ue73Pzy/ki/6f+b3Uu3YB68T7WtC/Wvt/2qN2AOvP8x/6l/4P/Uv/h/7Vrv9/2JK3FgC3J89/6F+d+v8v69wOYP15/kP/0v+hL63mvf61SpSXeHtfYkWJrdH1I0e6AeLqr0Tx/6DctHC5C727hzclAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALvovAAD//yhR7u8=") r3 = syz_open_procfs(0x0, &(0x7f0000001200)='mounts\x00') pread64(r3, &(0x7f0000001880)=""/4079, 0xfef, 0x66) 2.215727787s ago: executing program 1 (id=696): socket$nl_xfrm(0x10, 0x3, 0x6) add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x6, 'bridge_slave_1\x00', {0x3}, 0x200}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000380), 0xfffffebe}], 0x1) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) poll(&(0x7f0000000500)=[{r1, 0x4110}], 0x1, 0xb8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000000540)={0xfc, {"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", 0x1000}}, 0x1006) 1.840882696s ago: executing program 1 (id=700): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs(0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x60000000}, 0x0) 1.67905166s ago: executing program 1 (id=701): fsmount(0xffffffffffffffff, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000001440)=[{{&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000300)=""/91, 0x5b}, {&(0x7f0000000440)=""/92, 0x5c}, {&(0x7f00000004c0)=""/225, 0xe1}], 0x3, &(0x7f0000000c00)=""/40, 0x28}, 0x1}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c40)=""/171, 0xab}, {&(0x7f0000000d00)=""/123, 0x7b}], 0x2}, 0x8}, {{&(0x7f0000000dc0)=@caif=@dgm, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/222, 0xde}], 0x1, &(0x7f0000000f80)=""/239, 0xef}, 0x7ff}, {{&(0x7f0000001080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000001100)=""/241, 0xf1}], 0x100000000000004a, &(0x7f0000001240)=""/215, 0xd7}, 0x5}], 0x4, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x8}) shutdown(r4, 0x0) epoll_wait(r3, &(0x7f0000000080)=[{}], 0x1, 0x57c) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)={0x2000200b}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), 0x0, 0x835, 0x0) 1.67049186s ago: executing program 0 (id=702): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000500), &(0x7f0000000280)}, 0x20) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0xc0, 0x2, 0x7fff0000}]}) (async) modify_ldt$write(0x1, 0x0, 0x0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r2, 0x400, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}]}]}, 0x30}}, 0x0) r3 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000140)={r1}) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @loopback}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x40800) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000340), &(0x7f0000000780)=""/172}, 0x20) 1.581336832s ago: executing program 0 (id=704): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x38}}, 0x0) setns(0xc9, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000300)=@id, &(0x7f0000000340)=0x10, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x58) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0e8, 0x1, 0x0, 0x9, 0x8, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x27, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x24000890) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000c00)=ANY=[@ANYBLOB="300000000706010400000003000000000100000a08000640000000000900020073797a31000000000500010007000000b8accfde1098a0af59e544b22c38cdfbd8bdad38c95cc224eb05a7dd2b6c974414d5297586ab5834c5dcf12734a5c321f67b501f7d0ee6e13cd9896517f80329d585"], 0x30}, 0x1, 0x0, 0x0, 0x8005}, 0x0) r3 = socket(0x200000000000011, 0x5, 0xd) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000a00)=0x8000, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/lru_gen\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000a40)={0x0, @in6={{0x2, 0x2000, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000}}, 0x8, 0x806}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000b00)={0x2, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="021831020b00000000000000fddbdf25030005000000000002000300e00000010000000000000000030012003c80000002004e20ac1414b90000000000000000030006000000000002"], 0x58}}, 0x0) pread64(r4, &(0x7f0000000200), 0x100, 0x3f00) setitimer(0x2, 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000000540)={0x11}) setsockopt(0xffffffffffffffff, 0xea, 0x42000004, &(0x7f0000000000)="01000025", 0x4) 1.497068084s ago: executing program 5 (id=705): perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000002480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002440)={&(0x7f00000021c0)={0x15c, r2, 0x1, 0x70bd29, 0x25dfdbff, {0x3e, 0x0, 0x5e}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40080}, 0x4004000) 1.221713541s ago: executing program 0 (id=706): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x49, &(0x7f00000002c0)}) socket$l2tp6(0xa, 0x2, 0x73) socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket(0x1d, 0x2, 0x6) fchown(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r1, 0x0, r1) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x84, @multicast1, 0x4e20, 0x3, 'dh\x00', 0x21, 0x7, 0x2}, 0x2c) mount(0x0, &(0x7f0000000180)='./dev\x00', 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES8=r3], 0xf8}, 0x1, 0x0, 0x0, 0x24008890}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x12) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r5, &(0x7f0000000480)='7', 0x1) openat$fault_inject(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/fail_make_request/times\x00', 0x1, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) 855.5419ms ago: executing program 5 (id=708): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2081}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000680)=""/4101, 0x0, 0xc}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0}, 0x4) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x11, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000400003286715aea872e8a41a6041a6646848ab483f3000a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001c00)='syzkaller\x00', 0x5, 0x27, &(0x7f0000001c40)=""/39, 0x100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 809.592181ms ago: executing program 4 (id=709): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x802, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) gettid() open(&(0x7f00000002c0)='./bus\x00', 0x143142, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0x3, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200440c4) r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000bc0)={'gre0\x00', &(0x7f0000000c00)={'syztnl1\x00', 0x0, 0x20, 0x20, 0xff7d, 0xb44, {{0x6, 0x4, 0x0, 0x4, 0x18, 0x66, 0x0, 0xf, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0x4, 0xf7, 0x1, 0x9}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000c80)={'ip_vti0\x00', &(0x7f0000001240)={'gretap0\x00', r1, 0x8, 0x40, 0x4, 0x1, {{0x1d, 0x4, 0x2, 0x3b, 0x74, 0x68, 0x0, 0xb, 0x4, 0x0, @multicast2, @private=0xa010101, {[@ssrr={0x89, 0xb, 0xae, [@broadcast, @broadcast]}, @timestamp_addr={0x44, 0x24, 0xe2, 0x1, 0x5, [{@remote, 0x3}, {@loopback, 0x925}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}]}, @timestamp_prespec={0x44, 0x1c, 0x33, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}, {@broadcast, 0x7}, {@broadcast, 0x4}]}, @cipso={0x86, 0x6, 0x1}, @generic={0x83, 0x4, "8aab"}, @generic={0x7, 0xb, "5b0d11d7df99c67815"}]}}}}}) 782.547471ms ago: executing program 5 (id=710): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x0, &(0x7f0000000140)}) r0 = socket(0x1f, 0x803, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="e2fa0e81ceb3dc4c43c215dc4dade38ff8c84acefa41ae002d4b61ce7602ee69ca59662a7ca071443645c1dc73113beeb9b5a73cd0415b0b37839aa6c68111a458fae5cf2c3a6a3bb8f9e0c32740df61cef926d51a7eff7b9b3f386c", 0x5c}], 0x1) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001440)=ANY=[@ANYBLOB="480000001400b5952bbd7000000000000a000000", @ANYRES32=0x0, @ANYBLOB="14000b00fe8000000000000000000000000000aa14000100"], 0x48}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = eventfd(0x101) read$eventfd(r3, &(0x7f00000000c0), 0x8) 771.357802ms ago: executing program 1 (id=711): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) poll(&(0x7f0000000500)=[{r0, 0x4110}], 0x1, 0xb8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000000540)={0xfc, {"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", 0x1000}}, 0x1006) 769.490112ms ago: executing program 0 (id=712): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) ioctl(0xffffffffffffffff, 0xc0184d03, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x800000a, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x1, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000c00)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc/sys/net/ipv4/tcp_ehash_entries\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xffffe000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x3810744, &(0x7f0000000300)={[{@nomblk_io_submit}, {@noinit_itable}, {@mblk_io_submit}, {@jqfmt_vfsv1}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@delalloc}, {@usrquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@inode_readahead_blks}]}, 0x1, 0x467, &(0x7f0000000500)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000001200)='mounts\x00') pread64(r1, &(0x7f0000001880)=""/4079, 0xfef, 0x66) 681.475674ms ago: executing program 4 (id=713): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x64, 0x30, 0x1, 0x300, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd34, 0x6000000}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 650.672535ms ago: executing program 5 (id=714): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0}, 0x0, 0x101, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000200)=[{0x2, 0x4, 0x800}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x5fce, &(0x7f0000000000)={0x0, 0xf962, 0x100, 0xfffffffe, 0x35}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x1}, 0x10e0e8, 0x0, 0x6, 0x1, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(&(0x7f00000007c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xf5, &(0x7f0000000800)=ANY=[@ANYBLOB="ffffffffffff0180c2ad827ae1409f7494e70014aa0700"/38, @ANYRES32=0x41424344, @ANYRES32=r3, @ANYBLOB="e108000290780005fe0bf989ac09980b161825fe06e2d4c3d9131281f2c44e4e4cbbb5010594dbb417686601396f7a169a9601f5f2c21dee563c638d5f0ab73d62055b7a871bb9a6536468b96b1f7dcf6e065569b22bc049fe0e3ccf03296c42903ca9b5b43063fa2cf04751cf8534d59f767a6d90449e21b0a842259c9092dcb672cb5fc0244111266006dc590dee29da19605df608e734900f6463dd68f2840e4d222ecee5920c4d835bc74c65597390842c59e88092e0f2a56c479619af52de81132d91d973"], 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0900000004150000040000000a"], 0x48) syz_emit_ethernet(0x46, &(0x7f0000000940)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000009c0)=[@in={0x2, 0x4e23, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000a00)={0x7, 0x84, 0x2, 0x5, 0x5, 0xf2, 0x0, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x2, 0x2}, 0xe) syz_emit_ethernet(0x4e, &(0x7f0000000a40)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x18, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000ac0)={&(0x7f0000002000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x200000, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000300)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r4, &(0x7f0000000700)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) statfs(&(0x7f0000001140)='.\x00', &(0x7f0000001180)=""/137) 619.824125ms ago: executing program 4 (id=715): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x38}}, 0x0) setns(0xc9, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000300)=@id, &(0x7f0000000340)=0x10, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x58) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0e8, 0x1, 0x0, 0x9, 0x8, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x27, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x24000890) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000c00)=ANY=[@ANYBLOB="300000000706010400000003000000000100000a08000640000000000900020073797a31000000000500010007000000b8accfde1098a0af59e544b22c38cdfbd8bdad38c95cc224eb05a7dd2b6c974414d5297586ab5834c5dcf12734a5c321f67b501f7d0ee6e13cd9896517f80329d585"], 0x30}, 0x1, 0x0, 0x0, 0x8005}, 0x0) r3 = socket(0x200000000000011, 0x5, 0xd) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000a00)=0x8000, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/lru_gen\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000a40)={0x0, @in6={{0x2, 0x2000, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000}}, 0x8, 0x806}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000b00)={0x2, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="021831020b00000000000000fddbdf25030005000000000002000300e00000010000000000000000030012003c80000002004e20ac1414b90000000000000000030006000000000002"], 0x58}}, 0x0) pread64(r4, &(0x7f0000000200), 0x100, 0x3f00) setitimer(0x2, 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000000540)={0x11}) setsockopt(0xffffffffffffffff, 0xea, 0x42000004, &(0x7f0000000000)="01000025", 0x4) 612.595696ms ago: executing program 0 (id=716): r0 = creat(&(0x7f0000000900)='./file0\x00', 0xc7) close(r0) io_uring_setup(0x44a, &(0x7f0000000940)={0x0, 0x7a4c, 0x8, 0x0, 0x57}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x108843, 0x98) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1f2) mount(0x0, &(0x7f0000000300)='./proc\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'pimreg0\x00', 0x7c2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x6}, 0x2732, 0x0, 0x0, 0x3, 0xfff, 0x7fff, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000400)=0x9) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000440)=0x3, 0x4) r2 = epoll_create(0x7) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000480)={0x2}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000004c0)={0x60000000}) mount(0x0, 0x0, &(0x7f0000000500)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000580)='100', 0x3) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000640)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000680)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x10}, r6}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000006c0)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x2, 0xfff9, 0xc60, @empty, 0x100}, r6, 0x9dff7ffc}}, 0x4d) r7 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8048, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000740), 0xc}, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000240), &(0x7f0000000280)=r7}, 0x20) fcntl$setlease(r1, 0x400, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x9, 0x0, 0x8, 0x8, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r9, 0x80000001}, &(0x7f0000000100)=0x8) socket$tipc(0x1e, 0x5, 0x0) 399.9941ms ago: executing program 4 (id=717): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000300)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000680)={0x24, @none={0x0, 0xffff}}, 0x14) sendmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 327.019242ms ago: executing program 6 (id=683): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fe02000000000000200000000c000600010000000100000024002d8005000100000000000500040000000000080002000300e200080003"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) (fail_nth: 1) 261.503474ms ago: executing program 4 (id=718): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x802, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) gettid() open(&(0x7f00000002c0)='./bus\x00', 0x143142, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000380)=0x632a, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0x3, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200440c4) r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000bc0)={'gre0\x00', &(0x7f0000000c00)={'syztnl1\x00', 0x0, 0x20, 0x20, 0xff7d, 0xb44, {{0xc, 0x4, 0x0, 0x4, 0x30, 0x66, 0x0, 0xf, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0x1c, 0xf7, 0x1, 0x9, [{@local, 0x8}, {@private=0xa010100, 0x3ff}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x9}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000c80)={'ip_vti0\x00', &(0x7f0000001240)={'gretap0\x00', r1, 0x8, 0x40, 0x4, 0x1, {{0x1e, 0x4, 0x2, 0x3b, 0x78, 0x68, 0x0, 0xb, 0x4, 0x0, @multicast2, @private=0xa010101, {[@ssrr={0x89, 0xb, 0xae, [@broadcast, @broadcast]}, @timestamp_addr={0x44, 0x24, 0xe2, 0x1, 0x5, [{@remote, 0x3}, {@loopback, 0x925}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}]}, @timestamp_prespec={0x44, 0x1c, 0x33, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}, {@broadcast, 0x7}, {@broadcast, 0x4}]}, @cipso={0x86, 0x6, 0x1}, @generic={0x83, 0x6, "8aabb3bc"}, @generic={0x7, 0xb, "5b0d11d7df99c67815"}]}}}}}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001400)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) mkdir(&(0x7f0000001440)='./sys_mount\x00', 0x0) mount(0x0, &(0x7f0000001480)='./sys_mount\x00', &(0x7f00000014c0)='sysfs\x00', 0x10000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r2, &(0x7f0000001540)='bfq', 0x3) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x20000880) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)={0x14, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000001700)="00112233445566778899", 0xa, 0x0, &(0x7f0000001740)={0x2, 0x1234, @loopback}, 0x10) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001780)=[{{&(0x7f00000017c0)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000001800)=[{0x0}], 0x1}, 0x20000000}], 0x1, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000001840), &(0x7f0000001880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000001940)='asymmetric\x00', 0x0, &(0x7f0000001980)="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", 0x1bb, r5) 241.313664ms ago: executing program 1 (id=719): r0 = gettid() r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x6000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000140)={0x92fa, 0x6, 0x0, 'queue1\x00'}) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = timerfd_create(0x0, 0x80000) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1) 153.870776ms ago: executing program 6 (id=720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0xf00, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa0}}, 0x0) 138.382777ms ago: executing program 5 (id=721): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) setns(0xc9, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x880) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 91.896438ms ago: executing program 0 (id=722): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r0}, 0x94) setns(0xc9, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x880) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0xffffffffffffffff, r3, 0xffffffffffffffff) clock_adjtime(0x0, &(0x7f00000002c0)={0xc859, 0x7, 0x6, 0x0, 0x8, 0x71a, 0x9, 0xffffffffffffffff, 0x3711, 0x100000001, 0x8, 0x398, 0x580ef166, 0x3, 0x0, 0x81, 0x1, 0x8, 0x9, 0x8, 0x1, 0x5, 0x0, 0x94dc, 0xc411, 0xffffffffffff4684}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 30.582149ms ago: executing program 4 (id=723): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x1000410, &(0x7f00000001c0)={[{@init_itable_val={'init_itable', 0x3d, 0xd4d}}, {@grpquota}]}, 0x1, 0x500, &(0x7f00000007c0)="$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") (async, rerun: 64) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000cc0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000d00)={0x1, 0x7, 0xfffffffffffffffe, 0x2, 0x1, 0xfffffffffffffffe, 0x2, 0x3, 0x4040c407}) renameat2(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000dc0)='./file2\x00', 0x4) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file1\x00', 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000f00)={0x0, 0x7005}, 0x4) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000f40), 0x8) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000f80)={0x1, &(0x7f0000000fc0)=[{0x6, 0xfc, 0x1}]}, 0x10) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000001000)) (async, rerun: 32) socket(0x1, 0x2, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) (async) quotactl$Q_QUOTAON(0x1, &(0x7f0000001040)=@nullb, 0x0, &(0x7f0000001080)='./file0\x00') (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) 1.10204ms ago: executing program 6 (id=724): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x17}, 0x28) 0s ago: executing program 5 (id=725): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) ioctl(0xffffffffffffffff, 0xc0184d03, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x800000a, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x1, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000c00)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc/sys/net/ipv4/tcp_ehash_entries\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x3810744, &(0x7f0000000300)={[{@nomblk_io_submit}, {@noinit_itable}, {@mblk_io_submit}, {@jqfmt_vfsv1}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@delalloc}, {@usrquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@inode_readahead_blks}]}, 0x1, 0x467, &(0x7f0000000500)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000001200)='mounts\x00') pread64(r1, &(0x7f0000001880)=""/4079, 0xfef, 0x66) kernel console output (not intermixed with test programs): f0f9f4a6128 R14: 00007f0f9f4a6090 R15: 00007ffe35956a38 [ 56.733362][ T4414] [ 56.827049][ T4414] bridge0: port 3(macvlan2) entered blocking state [ 56.827084][ T4414] bridge0: port 3(macvlan2) entered disabled state [ 56.827412][ T4414] macvlan2: entered allmulticast mode [ 56.827467][ T4414] bridge0: entered allmulticast mode [ 56.827625][ T4414] bridge0: entered promiscuous mode [ 56.863469][ T4414] macvlan2: left allmulticast mode [ 56.863567][ T4414] bridge0: left allmulticast mode [ 57.015496][ T4429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.026924][ T4416] bridge0: port 3(macvlan2) entered blocking state [ 57.027119][ T4416] bridge0: port 3(macvlan2) entered disabled state [ 57.038047][ T4416] macvlan2: entered allmulticast mode [ 57.038156][ T4416] bridge0: entered allmulticast mode [ 57.044190][ T4429] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.207: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 57.044414][ T4429] EXT4-fs (loop3): Remounting filesystem read-only [ 57.053788][ T4416] macvlan2: left allmulticast mode [ 57.053847][ T4416] bridge0: left allmulticast mode [ 57.108279][ T9] bridge0: left promiscuous mode [ 57.117915][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.222132][ T4439] sg_write: process 129 (syz.3.210) changed security contexts after opening file descriptor, this is not allowed. [ 57.445849][ T4454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 57.445874][ T4454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 57.586656][ T4463] netlink: 36 bytes leftover after parsing attributes in process `syz.1.218'. [ 57.627002][ T4467] ip_tables: iptables: counters copy to user failed while replacing table [ 57.743485][ T4484] xt_hashlimit: size too large, truncated to 1048576 [ 57.928209][ T4493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 57.953210][ T4492] set_capacity_and_notify: 3 callbacks suppressed [ 57.953234][ T4492] loop4: detected capacity change from 0 to 512 [ 57.956916][ T4492] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 57.956936][ T4492] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.999397][ T4492] EXT4-fs (loop4): 1 truncate cleaned up [ 57.999754][ T4492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.187628][ T4496] FAULT_INJECTION: forcing a failure. [ 58.187628][ T4496] name failslab, interval 1, probability 0, space 0, times 0 [ 58.187668][ T4496] CPU: 0 UID: 0 PID: 4496 Comm: syz.5.225 Not tainted syzkaller #0 PREEMPT(lazy) [ 58.187774][ T4496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.187793][ T4496] Call Trace: [ 58.187800][ T4496] [ 58.187808][ T4496] __dump_stack+0x1d/0x30 [ 58.188012][ T4496] dump_stack_lvl+0x95/0xd0 [ 58.188045][ T4496] dump_stack+0x15/0x1b [ 58.188137][ T4496] should_fail_ex+0x262/0x280 [ 58.188174][ T4496] ? ops_init+0x4b/0x2e0 [ 58.188200][ T4496] should_failslab+0x8c/0xb0 [ 58.188317][ T4496] __kmalloc_noprof+0xd0/0x4d0 [ 58.188360][ T4496] ? ops_init+0x4b/0x2e0 [ 58.188391][ T4496] ops_init+0x4b/0x2e0 [ 58.188420][ T4496] setup_net+0x9f/0x230 [ 58.188585][ T4496] copy_net_ns+0x333/0x490 [ 58.188633][ T4496] create_new_namespaces+0x1f6/0x420 [ 58.188682][ T4496] unshare_nsproxy_namespaces+0x115/0x150 [ 58.188769][ T4496] ksys_unshare+0x3fd/0x6f0 [ 58.188828][ T4496] __x64_sys_unshare+0x1f/0x30 [ 58.188858][ T4496] x64_sys_call+0x1e33/0x2550 [ 58.188933][ T4496] do_syscall_64+0x112/0x360 [ 58.189070][ T4496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.189102][ T4496] RIP: 0033:0x7efc5176e1d9 [ 58.189118][ T4496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.189139][ T4496] RSP: 002b:00007efc501c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 58.189241][ T4496] RAX: ffffffffffffffda RBX: 00007efc519f5fa0 RCX: 00007efc5176e1d9 [ 58.189283][ T4496] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 58.189337][ T4496] RBP: 00007efc51805888 R08: 0000000000000000 R09: 0000000000000000 [ 58.189363][ T4496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.189453][ T4496] R13: 00007efc519f6038 R14: 00007efc519f5fa0 R15: 00007fff62bcdde8 [ 58.189483][ T4496] [ 58.499948][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.548047][ T4506] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 58.600213][ T4502] loop0: detected capacity change from 0 to 128 [ 58.622544][ T4508] FAULT_INJECTION: forcing a failure. [ 58.622544][ T4508] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 58.622577][ T4508] CPU: 0 UID: 0 PID: 4508 Comm: syz.4.228 Not tainted syzkaller #0 PREEMPT(lazy) [ 58.622672][ T4508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.622689][ T4508] Call Trace: [ 58.622700][ T4508] [ 58.622712][ T4508] __dump_stack+0x1d/0x30 [ 58.622804][ T4508] dump_stack_lvl+0x95/0xd0 [ 58.622879][ T4508] dump_stack+0x15/0x1b [ 58.622908][ T4508] should_fail_ex+0x262/0x280 [ 58.622975][ T4508] should_fail+0xb/0x20 [ 58.623010][ T4508] should_fail_usercopy+0x1a/0x20 [ 58.623081][ T4508] strncpy_from_user+0x27/0x250 [ 58.623115][ T4508] getname_long+0x66/0x100 [ 58.623152][ T4508] do_getname+0x12e/0x1c0 [ 58.623182][ T4508] getname_flags+0x1d/0x30 [ 58.623212][ T4508] __se_sys_quotactl+0x157/0x640 [ 58.623284][ T4508] __x64_sys_quotactl+0x55/0x70 [ 58.623331][ T4508] x64_sys_call+0x13d5/0x2550 [ 58.623365][ T4508] do_syscall_64+0x112/0x360 [ 58.623442][ T4508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.623474][ T4508] RIP: 0033:0x7f334873e1d9 [ 58.623496][ T4508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.623580][ T4508] RSP: 002b:00007f3347197028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 58.623606][ T4508] RAX: ffffffffffffffda RBX: 00007f33489c5fa0 RCX: 00007f334873e1d9 [ 58.623626][ T4508] RDX: 0000000000000000 RSI: 0000200000000b40 RDI: 0000000000000000 [ 58.623645][ T4508] RBP: 00007f3347197090 R08: 0000000000000000 R09: 0000000000000000 [ 58.623663][ T4508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.623693][ T4508] R13: 00007f33489c6038 R14: 00007f33489c5fa0 R15: 00007ffca5fc4998 [ 58.623794][ T4508] [ 58.989269][ T4519] usb usb8: usbfs: process 4519 (syz.5.232) did not claim interface 0 before use [ 59.031563][ T4523] af_packet: tpacket_rcv: packet too big, clamped from 65075 to 3952. macoff=96 [ 59.760527][ T4533] bond0: (slave bond_slave_0): Releasing backup interface [ 59.761180][ T4533] bond_slave_0: left promiscuous mode [ 59.761284][ T4533] bond_slave_0: left allmulticast mode [ 60.449550][ T4454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 60.596749][ T4547] loop1: detected capacity change from 0 to 128 [ 60.652023][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 60.652041][ T29] audit: type=1400 audit(1791778436.148:2252): avc: denied { read } for pid=4549 comm="syz.3.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.675184][ T29] audit: type=1400 audit(1791778436.168:2253): avc: denied { execute } for pid=4546 comm="syz.1.240" name="file0" dev="tmpfs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.708857][ T4550] loop3: detected capacity change from 0 to 512 [ 60.816762][ T29] audit: type=1400 audit(1791778436.268:2254): avc: denied { write } for pid=4540 comm="syz.5.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 60.816839][ T29] audit: type=1400 audit(1791778436.278:2255): avc: denied { create } for pid=4540 comm="syz.5.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.816863][ T29] audit: type=1400 audit(1791778436.298:2256): avc: denied { getopt } for pid=4540 comm="syz.5.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.816930][ T29] audit: type=1400 audit(1791778436.298:2257): avc: denied { bind } for pid=4540 comm="syz.5.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.969404][ T4547] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 60.973023][ T29] audit: type=1400 audit(1791778436.468:2258): avc: denied { mount } for pid=4546 comm="syz.1.240" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.973068][ T4547] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.974349][ T4550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.974480][ T4550] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.975975][ T4547] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.061891][ T29] audit: type=1400 audit(1791778436.558:2259): avc: denied { ioctl } for pid=4549 comm="syz.3.242" path="socket:[9354]" dev="sockfs" ino=9354 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.153191][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.310502][ T4568] loop3: detected capacity change from 0 to 1024 [ 61.320476][ T4568] EXT4-fs: Ignoring removed bh option [ 61.333589][ T29] audit: type=1400 audit(1791778436.828:2260): avc: denied { create } for pid=4569 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 61.357903][ T29] audit: type=1400 audit(1791778436.828:2261): avc: denied { write } for pid=4569 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 61.358625][ T4570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'. [ 61.378885][ T4570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'. [ 61.461641][ T4568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.509066][ T4585] loop5: detected capacity change from 0 to 1024 [ 61.525258][ T4585] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 61.547405][ T4585] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 2: comm syz.5.247: lblock 2 mapped to illegal pblock 2 (length 1) [ 61.547533][ T4585] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 61.547662][ T4585] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 48: comm syz.5.247: lblock 0 mapped to illegal pblock 48 (length 1) [ 61.547704][ T4585] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 61.547818][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 61.547842][ C1] EXT4-fs (loop5): initial error at time 1791778437: ext4_map_blocks:790: inode 3: block 2 [ 61.547893][ C1] EXT4-fs (loop5): last error at time 1791778437: ext4_map_blocks:790: inode 3: block 2 [ 61.573604][ T4585] EXT4-fs error (device loop5): ext4_acquire_dquot:7070: comm syz.5.247: Failed to acquire dquot type 0 [ 61.573799][ T4585] loop5: lost filesystem error report for type 5 error -117 [ 61.574149][ T4585] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 61.574271][ T4585] loop5: lost filesystem error report for type 5 error -117 [ 61.574590][ T4585] EXT4-fs error (device loop5): ext4_evict_inode:269: inode #11: comm syz.5.247: mark_inode_dirty error [ 61.574680][ T4585] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 61.574957][ T4585] EXT4-fs warning (device loop5): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 61.575088][ T4585] EXT4-fs (loop5): 1 orphan inode deleted [ 61.576098][ T4585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.577397][ T3986] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 61.577896][ T3986] EXT4-fs error (device loop5): ext4_release_dquot:7106: comm kworker/u8:10: Failed to release dquot type 0 [ 61.582095][ T4585] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.583511][ T4585] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz.5.247: Invalid inode table block 1 in block_group 0 [ 61.583608][ T4585] loop5: lost filesystem error report for type 5 error -117 [ 61.583966][ T4585] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 61.584022][ T4585] loop5: lost filesystem error report for type 5 error -117 [ 61.584372][ T4585] EXT4-fs error (device loop5): ext4_quota_off:7354: inode #3: comm syz.5.247: mark_inode_dirty error [ 61.584455][ T4585] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 61.584778][ T4585] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz.5.247: Invalid inode table block 1 in block_group 0 [ 61.584957][ T4585] loop5: lost filesystem error report for type 5 error -117 [ 61.615907][ T4590] loop1: detected capacity change from 0 to 512 [ 61.662266][ T4590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.679531][ T4590] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.859998][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.894003][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.996527][ T4600] loop5: detected capacity change from 0 to 128 [ 62.399763][ T4624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4624 comm=syz.5.256 [ 62.710251][ T4598] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.715282][ T4598] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.861063][ T4598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.863466][ T4598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.913985][ T4619] bond0: (slave bond_slave_0): Releasing backup interface [ 62.949272][ T3996] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.949927][ T3996] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.950050][ T3996] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.950156][ T3996] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.018694][ T4634] bridge0: port 3(bond0) entered blocking state [ 63.018731][ T4634] bridge0: port 3(bond0) entered disabled state [ 63.018895][ T4634] bond0: entered allmulticast mode [ 63.018912][ T4634] bond_slave_0: entered allmulticast mode [ 63.019002][ T4634] bond_slave_1: entered allmulticast mode [ 63.019866][ T4634] bond0: entered promiscuous mode [ 63.019881][ T4634] bond_slave_0: entered promiscuous mode [ 63.019962][ T4634] bond_slave_1: entered promiscuous mode [ 63.110571][ T4642] loop3: detected capacity change from 0 to 1024 [ 63.116891][ T4642] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 63.117014][ T4642] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.120514][ T4642] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 63.120900][ T4642] EXT4-fs (loop3): orphan cleanup on readonly fs [ 63.162726][ T4642] EXT4-fs error (device loop3): ext4_read_inode_bitmap:169: comm syz.3.261: Inode bitmap for bg 0 marked uninitialized [ 63.162915][ T4642] loop3: lost filesystem error report for type 5 error -117 [ 63.167777][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 63.167800][ C0] EXT4-fs (loop3): initial error at time 1791778438: ext4_read_inode_bitmap:169 [ 63.167828][ C0] EXT4-fs (loop3): last error at time 1791778438: ext4_read_inode_bitmap:169 [ 63.168605][ T4642] EXT4-fs (loop3): Remounting filesystem read-only [ 63.169561][ T4642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.274973][ T4630] loop4: detected capacity change from 0 to 512 [ 63.283544][ T4632] 9p: Bad value for 'source' [ 63.327704][ T4645] loop1: detected capacity change from 0 to 8192 [ 63.366429][ T4633] loop4: detected capacity change from 0 to 512 [ 63.450001][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.506607][ T4652] loop1: detected capacity change from 0 to 128 [ 63.520917][ T4652] ext4: Unknown parameter 'smackfsdef' [ 63.594792][ T4656] loop0: detected capacity change from 0 to 512 [ 63.613513][ T4656] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 63.645505][ T4633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.651203][ T4633] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.694980][ T4652] loop1: detected capacity change from 0 to 512 [ 63.748542][ T4661] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 63.781399][ T4633] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #2: block 18: comm syz.4.258: lblock 17 mapped to illegal pblock 18 (length 1) [ 63.816721][ T4663] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 63.849482][ T4663] bond2 (unregistering): Released all slaves [ 63.871754][ T4669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.268'. [ 63.871778][ T4669] netlink: 12 bytes leftover after parsing attributes in process `syz.5.268'. [ 63.874330][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.005058][ T4681] xt_hashlimit: size too large, truncated to 1048576 [ 64.039149][ T4683] capability: warning: `syz.5.275' uses deprecated v2 capabilities in a way that may be insecure [ 64.116505][ T4687] pim6reg: entered allmulticast mode [ 64.181179][ T4688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'. [ 64.468606][ T4710] loop5: detected capacity change from 0 to 512 [ 64.480994][ T4710] EXT4-fs: Ignoring removed nobh option [ 64.495725][ T4710] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 64.496178][ T4710] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.284: attempt to clear invalid blocks 1 len 1 [ 64.496289][ T4710] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 64.496696][ T4710] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 64.496781][ T4710] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.284: invalid indirect mapped block 1819239214 (level 0) [ 64.496833][ T4710] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 64.497120][ T4710] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.284: invalid indirect mapped block 1819239214 (level 1) [ 64.497160][ T4710] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 64.497558][ T4710] EXT4-fs (loop5): 1 truncate cleaned up [ 64.498322][ T4710] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.618634][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.685320][ T4717] loop1: detected capacity change from 0 to 1024 [ 64.697680][ T4717] EXT4-fs: test_dummy_encryption option not supported [ 64.930288][ T4726] loop5: detected capacity change from 0 to 512 [ 64.933286][ T4726] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 65.045171][ T4727] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 65.239751][ T4729] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 65.243072][ T4729] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 65.243375][ T4729] EXT4-fs (loop0): orphan cleanup on readonly fs [ 65.243480][ T4729] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #3: comm syz.0.291: pblk 67 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 65.243642][ T4729] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 65.245460][ T4729] EXT4-fs error (device loop0): ext4_quota_enable:7264: comm syz.0.291: Bad quota inode: 3, type: 0 [ 65.245600][ T4729] loop0: lost filesystem error report for type 5 error -117 [ 65.246386][ T4729] EXT4-fs warning (device loop0): ext4_enable_quotas:7305: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 65.246490][ T4729] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 65.247525][ T4729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.501167][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.624143][ T4735] vhci_hcd vhci_hcd.4: default hub control req: 0000 v0000 i0000 l0 [ 65.678842][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 65.678865][ T29] audit: type=1400 audit(1791778441.168:2321): avc: denied { mmap_zero } for pid=4734 comm="syz.1.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 65.841589][ T3996] IPVS: starting estimator thread 0... [ 65.885048][ T4752] gre1: entered allmulticast mode [ 65.919675][ T29] audit: type=1400 audit(1791778441.418:2322): avc: denied { firmware_load } for pid=4756 comm="syz.1.301" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 65.927805][ T4753] IPVS: using max 1968 ests per chain, 98400 per kthread [ 65.931547][ T4757] bond0: Error: CAN devices cannot be enslaved [ 65.979789][ T4746] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=66 sclass=netlink_tcpdiag_socket pid=4746 comm=syz.4.298 [ 66.034816][ T29] audit: type=1400 audit(1791778441.528:2323): avc: denied { create } for pid=4767 comm="syz.4.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.057591][ T29] audit: type=1400 audit(1791778441.538:2324): avc: denied { getopt } for pid=4767 comm="syz.4.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.057634][ T29] audit: type=1400 audit(1791778441.538:2325): avc: denied { setopt } for pid=4767 comm="syz.4.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.057693][ T29] audit: type=1400 audit(1791778441.538:2326): avc: denied { write } for pid=4767 comm="syz.4.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.057720][ T29] audit: type=1400 audit(1791778441.538:2327): avc: denied { read } for pid=4767 comm="syz.4.304" lport=56154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.125569][ T4769] netlink: 48 bytes leftover after parsing attributes in process `syz.5.302'. [ 66.177837][ T29] audit: type=1400 audit(1791778441.668:2328): avc: denied { execute_no_trans } for pid=4770 comm="syz.3.305" path="/67/file0" dev="tmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.236438][ T29] audit: type=1400 audit(1791778441.728:2329): avc: denied { write } for pid=4771 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 66.294439][ T3996] IPVS: starting estimator thread 0... [ 66.348179][ T29] audit: type=1400 audit(1791778441.838:2330): avc: denied { write } for pid=4788 comm="syz.3.311" name="kmsg" dev="proc" ino=4026532043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 66.377908][ T4787] IPVS: using max 1872 ests per chain, 93600 per kthread [ 66.379117][ T4780] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 66.524490][ T4801] netlink: 32 bytes leftover after parsing attributes in process `syz.1.316'. [ 66.630816][ T4812] sctp: [Deprecated]: syz.0.320 (pid 4812) Use of struct sctp_assoc_value in delayed_ack socket option. [ 66.630816][ T4812] Use struct sctp_sack_info instead [ 66.657195][ T4815] netlink: 'syz.3.313': attribute type 4 has an invalid length. [ 67.042245][ T4821] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 67.042276][ T4821] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 67.042329][ T4821] vhci_hcd vhci_hcd.0: Device attached [ 67.115595][ T4821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.116242][ T4821] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.129284][ T4822] vhci_hcd: cannot find a urb of seqnum 150 max seqnum 0 [ 67.130508][ T3999] vhci_hcd vhci_hcd.4: stop threads [ 67.130528][ T3999] vhci_hcd vhci_hcd.4: release socket [ 67.130547][ T3999] vhci_hcd vhci_hcd.4: disconnect device [ 67.349364][ T4829] FAULT_INJECTION: forcing a failure. [ 67.349364][ T4829] name failslab, interval 1, probability 0, space 0, times 0 [ 67.349395][ T4829] CPU: 0 UID: 0 PID: 4829 Comm: syz.3.325 Not tainted syzkaller #0 PREEMPT(lazy) [ 67.349430][ T4829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.349444][ T4829] Call Trace: [ 67.349472][ T4829] [ 67.349483][ T4829] __dump_stack+0x1d/0x30 [ 67.349530][ T4829] dump_stack_lvl+0x95/0xd0 [ 67.349564][ T4829] dump_stack+0x15/0x1b [ 67.349602][ T4829] should_fail_ex+0x262/0x280 [ 67.349651][ T4829] ? security_file_alloc+0x32/0xf0 [ 67.349679][ T4829] should_failslab+0x8c/0xb0 [ 67.349756][ T4829] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 67.349813][ T4829] ? security_file_alloc+0x32/0xf0 [ 67.349837][ T4829] security_file_alloc+0x32/0xf0 [ 67.349859][ T4829] init_file+0x5b/0x1b0 [ 67.349885][ T4829] alloc_empty_file+0x85/0x1e0 [ 67.349911][ T4829] alloc_file_pseudo+0x92/0x120 [ 67.350026][ T4829] sock_alloc_file+0x9c/0x1e0 [ 67.350060][ T4829] __sys_socketpair+0x245/0x430 [ 67.350082][ T4829] __x64_sys_socketpair+0x52/0x60 [ 67.350104][ T4829] x64_sys_call+0x1bf7/0x2550 [ 67.350137][ T4829] do_syscall_64+0x112/0x360 [ 67.350214][ T4829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.350238][ T4829] RIP: 0033:0x7fe64f5ee1d9 [ 67.350255][ T4829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.350274][ T4829] RSP: 002b:00007fe64e047028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 67.350296][ T4829] RAX: ffffffffffffffda RBX: 00007fe64f875fa0 RCX: 00007fe64f5ee1d9 [ 67.350389][ T4829] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 67.350479][ T4829] RBP: 00007fe64f685888 R08: 0000000000000000 R09: 0000000000000000 [ 67.350493][ T4829] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000000 [ 67.350506][ T4829] R13: 00007fe64f876038 R14: 00007fe64f875fa0 R15: 00007ffd024bfd68 [ 67.350527][ T4829] [ 67.471491][ T4832] netlink: 12 bytes leftover after parsing attributes in process `syz.5.326'. [ 67.576803][ T4832] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.603606][ T4833] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.603741][ T4833] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.630912][ T4832] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 67.649483][ T4832] 8021q: adding VLAN 0 to HW filter on device bond3 [ 67.650944][ T4832] bond2: (slave bond3): Enslaving as an active interface with an up link [ 67.681583][ T4832] bond2 (unregistering): (slave bond3): Releasing backup interface [ 67.686021][ T4832] bond2 (unregistering): Released all slaves [ 67.717479][ T4850] FAT-fs (loop1): bogus number of reserved sectors [ 67.717502][ T4850] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 67.717523][ T4850] FAT-fs (loop1): Can't find a valid FAT filesystem [ 67.761872][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.797708][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.904206][ T4865] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.337'. [ 67.922627][ T4848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49432 sclass=netlink_route_socket pid=4848 comm=syz.0.329 [ 67.926071][ T3378] Process accounting resumed [ 67.972560][ T4867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.996687][ T4866] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 68.141552][ T4865] EXT4-fs: quotafile must be on filesystem root [ 68.344729][ T4876] netlink: 'syz.3.340': attribute type 10 has an invalid length. [ 68.357073][ T4876] team0: Port device dummy0 added [ 68.363385][ T4876] netlink: 'syz.3.340': attribute type 10 has an invalid length. [ 68.379353][ T4876] team0: Port device dummy0 removed [ 68.509890][ T4883] set_capacity_and_notify: 12 callbacks suppressed [ 68.509924][ T4883] loop3: detected capacity change from 0 to 512 [ 68.531995][ T4883] msdos: Unknown parameter '13!â©Ñ¤Fâ…Xïi“ÀöŸ_“24°ëž‰§ŸD…îÝ' [ 68.602550][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.627173][ T4889] loop1: detected capacity change from 0 to 512 [ 68.727132][ T4898] netlink: 'syz.5.347': attribute type 1 has an invalid length. [ 68.727151][ T4898] netlink: 28 bytes leftover after parsing attributes in process `syz.5.347'. [ 68.830929][ T4907] SELinux: policydb version 0 does not match my version range 15-35 [ 68.830956][ T4907] SELinux: failed to load policy [ 68.926637][ T4911] netlink: 'syz.4.352': attribute type 6 has an invalid length. [ 68.942146][ T4916] SELinux: policydb version 0 does not match my version range 15-35 [ 68.942178][ T4916] SELinux: failed to load policy [ 69.065975][ T4933] loop5: detected capacity change from 0 to 128 [ 69.093007][ T4933] syz.5.357: attempt to access beyond end of device [ 69.093007][ T4933] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 69.182250][ T4941] loop1: detected capacity change from 0 to 512 [ 69.213697][ T4941] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.341942][ T4948] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.360'. [ 69.557876][ T4952] loop0: detected capacity change from 0 to 512 [ 69.560718][ T4958] SET target dimension over the limit! [ 69.612619][ T4952] EXT4-fs: quotafile must be on filesystem root [ 69.712191][ T4970] loop1: detected capacity change from 0 to 512 [ 69.713567][ T4970] EXT4-fs: Ignoring removed bh option [ 69.726097][ T4970] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c128, mo2=0002] [ 69.726145][ T4970] System zones: 1-12 [ 69.726635][ T4970] EXT4-fs (loop1): 1 truncate cleaned up [ 70.037152][ T4979] netlink: 140 bytes leftover after parsing attributes in process `syz.1.371'. [ 70.037194][ T4979] netlink: 40 bytes leftover after parsing attributes in process `syz.1.371'. [ 70.074527][ T4983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.074650][ T4983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.145114][ T4983] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(18) [ 70.145176][ T4983] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 70.145206][ T4983] vhci_hcd vhci_hcd.0: Device attached [ 70.147651][ T4994] vhci_hcd: connection closed [ 70.150534][ T4003] vhci_hcd vhci_hcd.4: stop threads [ 70.150596][ T4003] vhci_hcd vhci_hcd.4: release socket [ 70.150648][ T4003] vhci_hcd vhci_hcd.4: disconnect device [ 70.281219][ T5001] loop0: detected capacity change from 0 to 512 [ 70.289889][ T5001] ext2: Unknown parameter 'acl"errors' [ 70.551906][ T5010] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 70.600516][ T5012] ip_tables: iptables: counters copy to user failed while replacing table [ 71.380702][ T29] kauditd_printk_skb: 3638 callbacks suppressed [ 71.380727][ T29] audit: type=1326 audit(1791778446.038:5969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4978 comm="syz.1.371" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b242fe1d9 code=0x7ff00000 [ 71.490012][ T29] audit: type=1326 audit(1791778446.988:5970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5032 comm="syz.1.383" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b242fe1d9 code=0x7ffc0000 [ 71.490292][ T29] audit: type=1326 audit(1791778446.988:5971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5032 comm="syz.1.383" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b242fe1d9 code=0x7ffc0000 [ 71.490425][ T29] audit: type=1326 audit(1791778446.988:5972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5032 comm="syz.1.383" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b242fe1d9 code=0x7ffc0000 [ 71.490967][ T29] audit: type=1326 audit(1791778446.988:5973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5032 comm="syz.1.383" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3b242fe1d9 code=0x7ffc0000 [ 71.491470][ T29] audit: type=1326 audit(1791778446.988:5974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5032 comm="syz.1.383" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b242fe1d9 code=0x7ffc0000 [ 71.492356][ T29] audit: type=1326 audit(1791778446.988:5975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5032 comm="syz.1.383" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b242fe1d9 code=0x7ffc0000 [ 71.492389][ T29] audit: type=1326 audit(1791778446.988:5976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5032 comm="syz.1.383" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b242fe1d9 code=0x7ffc0000 [ 71.680083][ T29] audit: type=1326 audit(1791778447.178:5977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5032 comm="syz.1.383" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3b242fe1d9 code=0x7ffc0000 [ 71.680575][ T29] audit: type=1326 audit(1791778447.178:5978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5032 comm="syz.1.383" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3b242fdf42 code=0x7ffc0000 [ 71.760049][ T5033] loop1: detected capacity change from 0 to 1024 [ 71.834950][ T5033] EXT4-fs mount: 4 callbacks suppressed [ 71.835059][ T5033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 71.835303][ T5033] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.372405][ T5033] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.102756][ T5061] loop0: detected capacity change from 0 to 512 [ 73.105122][ T5061] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.105155][ T5061] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.187665][ T5061] EXT4-fs (loop0): 1 orphan inode deleted [ 73.189106][ T5061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.280503][ T5066] tipc: Enabling of bearer rejected, already enabled [ 73.488720][ T5068] loop4: detected capacity change from 0 to 164 [ 73.600895][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.761560][ T5078] FAULT_INJECTION: forcing a failure. [ 73.761560][ T5078] name failslab, interval 1, probability 0, space 0, times 0 [ 73.761669][ T5078] CPU: 1 UID: 0 PID: 5078 Comm: syz.4.397 Not tainted syzkaller #0 PREEMPT(lazy) [ 73.761702][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.761725][ T5078] Call Trace: [ 73.761737][ T5078] [ 73.761765][ T5078] __dump_stack+0x1d/0x30 [ 73.761858][ T5078] dump_stack_lvl+0x95/0xd0 [ 73.761882][ T5078] dump_stack+0x15/0x1b [ 73.761904][ T5078] should_fail_ex+0x262/0x280 [ 73.761970][ T5078] ? skb_clone+0x151/0x1f0 [ 73.762059][ T5078] should_failslab+0x8c/0xb0 [ 73.762137][ T5078] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 73.762172][ T5078] ? skb_clone+0x151/0x1f0 [ 73.762200][ T5078] skb_clone+0x151/0x1f0 [ 73.762284][ T5078] __netlink_deliver_tap+0x2be/0x510 [ 73.762350][ T5078] netlink_unicast+0x656/0x680 [ 73.762389][ T5078] netlink_sendmsg+0x5be/0x6f0 [ 73.762415][ T5078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.762439][ T5078] ____sys_sendmsg+0x532/0x580 [ 73.762506][ T5078] ___sys_sendmsg+0x195/0x1e0 [ 73.762677][ T5078] __x64_sys_sendmsg+0xd4/0x160 [ 73.762720][ T5078] x64_sys_call+0x22ab/0x2550 [ 73.762755][ T5078] do_syscall_64+0x112/0x360 [ 73.762791][ T5078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.762901][ T5078] RIP: 0033:0x7f334873e1d9 [ 73.762922][ T5078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.762946][ T5078] RSP: 002b:00007f3347197028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.762973][ T5078] RAX: ffffffffffffffda RBX: 00007f33489c5fa0 RCX: 00007f334873e1d9 [ 73.762991][ T5078] RDX: 0000000000044000 RSI: 0000200000000000 RDI: 0000000000000003 [ 73.763068][ T5078] RBP: 00007f3347197090 R08: 0000000000000000 R09: 0000000000000000 [ 73.763085][ T5078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.763102][ T5078] R13: 00007f33489c6038 R14: 00007f33489c5fa0 R15: 00007ffca5fc4998 [ 73.763128][ T5078] [ 73.814276][ T5074] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 73.826696][ T5077] loop1: detected capacity change from 0 to 1024 [ 73.832733][ T5077] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 73.838659][ T5077] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 2: comm syz.1.398: lblock 2 mapped to illegal pblock 2 (length 1) [ 73.838773][ T5077] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 73.839244][ T5077] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 48: comm syz.1.398: lblock 0 mapped to illegal pblock 48 (length 1) [ 73.839421][ T5077] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 73.839630][ T5077] EXT4-fs error (device loop1): ext4_acquire_dquot:7070: comm syz.1.398: Failed to acquire dquot type 0 [ 73.839706][ T5077] loop1: lost filesystem error report for type 5 error -117 [ 73.839971][ T5077] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 73.840033][ T5077] loop1: lost filesystem error report for type 5 error -117 [ 73.840315][ T5077] EXT4-fs error (device loop1): ext4_evict_inode:269: inode #11: comm syz.1.398: mark_inode_dirty error [ 73.840417][ T5077] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 73.840643][ T5077] EXT4-fs warning (device loop1): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 73.840745][ T5077] EXT4-fs (loop1): 1 orphan inode deleted [ 73.841508][ T5077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.915121][ T4002] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 1) [ 73.915269][ T4002] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 73.916436][ T4002] EXT4-fs error (device loop1): ext4_release_dquot:7106: comm kworker/u8:26: Failed to release dquot type 0 [ 73.916510][ T4002] loop1: lost filesystem error report for type 5 error -117 [ 73.993281][ T5077] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm syz.1.398: lblock 1 mapped to illegal pblock 1 (length 1) [ 73.994912][ T5077] EXT4-fs error (device loop1): ext4_acquire_dquot:7070: comm syz.1.398: Failed to acquire dquot type 0 [ 74.251533][ T5072] netlink: 28 bytes leftover after parsing attributes in process `syz.5.395'. [ 74.251576][ T5072] netlink: 28 bytes leftover after parsing attributes in process `syz.5.395'. [ 74.284984][ T5072] ip6gretap0: entered promiscuous mode [ 74.286025][ T5072] syz_tun: entered promiscuous mode [ 74.363793][ T5096] netlink: 'syz.3.401': attribute type 21 has an invalid length. [ 74.363871][ T5096] netlink: 'syz.3.401': attribute type 4 has an invalid length. [ 74.397049][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.411174][ T3297] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 74.411202][ T3297] loop1: lost filesystem error report for type 5 error -117 [ 74.411387][ T3297] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 74.411404][ T3297] loop1: lost filesystem error report for type 5 error -117 [ 74.412541][ T3297] EXT4-fs error (device loop1): ext4_quota_off:7354: inode #3: comm syz-executor: mark_inode_dirty error [ 74.412592][ T3297] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 74.414402][ T3297] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 74.414484][ T3297] loop1: lost filesystem error report for type 5 error -117 [ 74.486558][ T5088] loop4: detected capacity change from 0 to 512 [ 74.529729][ T5104] loop0: detected capacity change from 0 to 512 [ 74.537135][ T5104] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 74.577163][ T5104] EXT4-fs (loop0): 1 orphan inode deleted [ 74.588375][ T4003] EXT4-fs error (device loop0): ext4_release_dquot:7106: comm kworker/u8:27: Failed to release dquot type 1 [ 74.588410][ T4003] loop0: lost filesystem error report for type 5 error -117 [ 74.610885][ T5105] loop1: detected capacity change from 0 to 1024 [ 74.614124][ T5104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.614379][ T5104] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.621441][ T5105] EXT4-fs: Ignoring removed bh option [ 74.667637][ T5105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.676047][ T5112] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 74.680995][ T3999] IPVS: starting estimator thread 0... [ 74.684012][ T5112] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 74.707312][ T5105] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #12: block 7: comm syz.1.402: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 74.712301][ T5105] EXT4-fs (loop1): Remounting filesystem read-only [ 74.797848][ T5117] IPVS: using max 2112 ests per chain, 105600 per kthread [ 74.886700][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.993049][ T5137] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.405' sets config #0 [ 75.048942][ T5134] loop1: detected capacity change from 0 to 8192 [ 75.165711][ T5150] loop1: detected capacity change from 0 to 2048 [ 75.241911][ T5153] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 75.241951][ T5153] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 75.241999][ T5153] vhci_hcd vhci_hcd.0: Device attached [ 75.242737][ T5150] EXT4-fs error (device loop1): __ext4_iget:5592: inode #2: block 127754: comm syz.1.412: invalid block [ 75.242775][ T5150] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 75.242941][ T5150] EXT4-fs (loop1): get root inode failed [ 75.243018][ T5150] EXT4-fs (loop1): mount failed [ 75.543348][ T5153] loop4: detected capacity change from 0 to 164 [ 75.623282][ T5104] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.751404][ T5153] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 75.918090][ T3870] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 76.190187][ T5155] vhci_hcd: connection reset by peer [ 76.190402][ T3986] vhci_hcd vhci_hcd.4: stop threads [ 76.190424][ T3986] vhci_hcd vhci_hcd.4: release socket [ 76.190444][ T3986] vhci_hcd vhci_hcd.4: disconnect device [ 76.306587][ T5185] loop1: detected capacity change from 0 to 512 [ 76.334313][ T5185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.334395][ T5185] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.131961][ T5201] netlink: 40 bytes leftover after parsing attributes in process `syz.4.422'. [ 78.199141][ T5205] loop5: detected capacity change from 0 to 512 [ 78.203128][ T5205] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.203245][ T5205] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.232645][ T5205] EXT4-fs (loop5): 1 orphan inode deleted [ 78.232959][ T5205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.282200][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.681066][ T5225] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 79.700831][ T5208] loop4: detected capacity change from 0 to 1024 [ 79.703988][ T5208] EXT4-fs: Mount option(s) incompatible with ext3 [ 79.732517][ T29] kauditd_printk_skb: 421 callbacks suppressed [ 79.732588][ T29] audit: type=1400 audit(1791778455.228:6394): avc: denied { name_bind } for pid=5222 comm="syz.3.430" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 79.885514][ T29] audit: type=1400 audit(1791778455.378:6395): avc: denied { mount } for pid=5230 comm="syz.0.424" name="/" dev="ramfs" ino=11600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 79.941486][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.032921][ T29] audit: type=1400 audit(1791778455.528:6396): avc: denied { setopt } for pid=5241 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.062158][ T29] audit: type=1400 audit(1791778455.558:6397): avc: denied { bind } for pid=5239 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.063405][ T29] audit: type=1400 audit(1791778455.558:6398): avc: denied { setopt } for pid=5239 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.070694][ T5240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.436'. [ 80.088153][ T29] audit: type=1400 audit(1791778455.568:6399): avc: denied { listen } for pid=5228 comm="syz.5.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 80.181384][ T29] audit: type=1400 audit(1791778455.678:6400): avc: denied { connect } for pid=5245 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.181672][ T29] audit: type=1400 audit(1791778455.678:6401): avc: denied { ioctl } for pid=5245 comm="syz.0.440" path="socket:[11649]" dev="sockfs" ino=11649 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.224566][ T5250] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=5250 comm=syz.5.441 [ 80.321180][ T5244] usb usb8: usbfs: process 5244 (syz.4.438) did not claim interface 0 before use [ 80.380652][ T5265] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.445'. [ 80.429925][ T5276] netlink: 'syz.0.447': attribute type 2 has an invalid length. [ 80.486194][ T29] audit: type=1400 audit(1791778455.978:6402): avc: denied { getopt } for pid=5289 comm="syz.4.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.576718][ T5293] loop1: detected capacity change from 0 to 512 [ 80.633938][ T5293] EXT4-fs: quotafile must be on filesystem root [ 80.645435][ T5304] netlink: 36 bytes leftover after parsing attributes in process `syz.5.453'. [ 80.645460][ T5304] netlink: 36 bytes leftover after parsing attributes in process `syz.5.453'. [ 80.645495][ T5304] netlink: 13 bytes leftover after parsing attributes in process `syz.5.453'. [ 80.683869][ T29] audit: type=1400 audit(1791778456.178:6403): avc: denied { mount } for pid=5295 comm="syz.3.451" name="/" dev="rpc_pipefs" ino=11681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 80.782617][ T5303] netlink: 32 bytes leftover after parsing attributes in process `syz.4.454'. [ 81.067883][ T3870] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 81.438231][ T5324] usb usb8: usbfs: process 5324 (syz.1.461) did not claim interface 0 before use [ 81.452674][ T5328] xt_hashlimit: max too large, truncated to 1048576 [ 81.517995][ T5325] xt_hashlimit: max too large, truncated to 1048576 [ 81.760637][ T5340] loop5: detected capacity change from 0 to 164 [ 81.932292][ T5342] vlan2: entered promiscuous mode [ 81.932319][ T5342] bridge0: entered promiscuous mode [ 82.023825][ T5342] netlink: set zone limit has 8 unknown bytes [ 82.339777][ T5375] ucma_write: process 274 (syz.5.474) changed security contexts after opening file descriptor, this is not allowed. [ 83.495825][ T5385] netlink: 'syz.0.477': attribute type 19 has an invalid length. [ 84.242077][ T5398] loop1: detected capacity change from 0 to 1024 [ 84.261862][ T5398] EXT4-fs: inline encryption not supported [ 84.262367][ T5398] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.281563][ T5398] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 2: comm syz.1.481: lblock 2 mapped to illegal pblock 2 (length 1) [ 84.281610][ T5398] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 84.281730][ T5398] EXT4-fs (loop1): Remounting filesystem read-only [ 84.281825][ T5398] EXT4-fs (loop1): 1 orphan inode deleted [ 84.282385][ T5398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.451278][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.556269][ T5410] loop3: detected capacity change from 0 to 128 [ 84.573502][ T5410] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.574363][ T5410] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.667435][ T5409] sctp: [Deprecated]: syz.3.485 (pid 5409) Use of struct sctp_assoc_value in delayed_ack socket option. [ 84.667435][ T5409] Use struct sctp_sack_info instead [ 84.684285][ T5405] loop5: detected capacity change from 0 to 512 [ 84.762067][ T5424] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 84.764004][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.817028][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 84.817047][ T29] audit: type=1400 audit(1791778460.308:6428): avc: denied { mounton } for pid=5422 comm="syz.1.490" path="/102/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 84.819293][ T5405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.819597][ T5405] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.872485][ T5437] loop0: detected capacity change from 0 to 512 [ 84.876780][ T5437] EXT4-fs: Ignoring removed orlov option [ 84.888301][ T5437] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 84.890529][ T5437] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 84.890654][ T5437] EXT4-fs (loop0): orphan cleanup on readonly fs [ 84.890846][ T5437] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2933: inode #15: comm syz.0.493: corrupted xattr block 252: invalid header [ 84.890951][ T5437] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.891081][ T5437] EXT4-fs (loop0): Remounting filesystem read-only [ 84.891117][ T5437] EXT4-fs warning (device loop0): ext4_evict_inode:288: xattr delete (err -117) [ 84.891149][ T5437] EXT4-fs (loop0): 1 orphan inode deleted [ 84.891599][ T5437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 84.960521][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.003183][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.180736][ T5447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.495'. [ 85.233900][ T5458] FAULT_INJECTION: forcing a failure. [ 85.233900][ T5458] name failslab, interval 1, probability 0, space 0, times 0 [ 85.233935][ T5458] CPU: 0 UID: 0 PID: 5458 Comm: syz.5.499 Not tainted syzkaller #0 PREEMPT(lazy) [ 85.233960][ T5458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.233973][ T5458] Call Trace: [ 85.233979][ T5458] [ 85.233986][ T5458] __dump_stack+0x1d/0x30 [ 85.234078][ T5458] dump_stack_lvl+0x95/0xd0 [ 85.234099][ T5458] dump_stack+0x15/0x1b [ 85.234181][ T5458] should_fail_ex+0x262/0x280 [ 85.234209][ T5458] ? alloc_empty_file+0x70/0x1e0 [ 85.234234][ T5458] should_failslab+0x8c/0xb0 [ 85.234267][ T5458] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 85.234369][ T5458] ? alloc_empty_file+0x70/0x1e0 [ 85.234395][ T5458] alloc_empty_file+0x70/0x1e0 [ 85.234432][ T5458] path_openat+0x50/0x10d0 [ 85.234516][ T5458] do_file_open+0x16c/0x290 [ 85.234554][ T5458] do_sys_openat2+0xa0/0x130 [ 85.234580][ T5458] __x64_sys_openat+0xf2/0x120 [ 85.234605][ T5458] x64_sys_call+0x1f72/0x2550 [ 85.234672][ T5458] do_syscall_64+0x112/0x360 [ 85.234699][ T5458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.234720][ T5458] RIP: 0033:0x7efc5176e1d9 [ 85.234735][ T5458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.234784][ T5458] RSP: 002b:00007efc501c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 85.234803][ T5458] RAX: ffffffffffffffda RBX: 00007efc519f5fa0 RCX: 00007efc5176e1d9 [ 85.234816][ T5458] RDX: 0000000000000101 RSI: 00002000000006c0 RDI: 0000000000000005 [ 85.234897][ T5458] RBP: 00007efc51805888 R08: 0000000000000000 R09: 0000000000000000 [ 85.234910][ T5458] R10: 0000000000000044 R11: 0000000000000246 R12: 0000000000000000 [ 85.234949][ T5458] R13: 00007efc519f6038 R14: 00007efc519f5fa0 R15: 00007fff62bcdde8 [ 85.234967][ T5458] [ 85.236860][ T29] audit: type=1400 audit(1791778460.728:6429): avc: denied { connect } for pid=5461 comm="syz.3.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.459543][ T5470] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.503'. [ 85.561426][ T5477] loop3: detected capacity change from 0 to 128 [ 85.565538][ T5477] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.566006][ T5477] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.583027][ T29] audit: type=1400 audit(1791778461.068:6430): avc: denied { append } for pid=5469 comm="syz.3.504" path="/106/file1/pids.events" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 85.643550][ T5480] loop1: detected capacity change from 0 to 512 [ 85.649794][ T5480] EXT4-fs: quotafile must be on filesystem root [ 85.668732][ T3996] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.668778][ T3996] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.668818][ T3996] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.668903][ T3996] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.720265][ T5482] netlink: 20 bytes leftover after parsing attributes in process `syz.5.505'. [ 85.722370][ T29] audit: type=1400 audit(1791778461.218:6431): avc: denied { lock } for pid=5481 comm="syz.5.505" path="socket:[11942]" dev="sockfs" ino=11942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 85.741061][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.790385][ T5487] netlink: 'syz.3.506': attribute type 4 has an invalid length. [ 85.796494][ T5487] FAULT_INJECTION: forcing a failure. [ 85.796494][ T5487] name failslab, interval 1, probability 0, space 0, times 0 [ 85.796519][ T5487] CPU: 0 UID: 0 PID: 5487 Comm: syz.3.506 Not tainted syzkaller #0 PREEMPT(lazy) [ 85.796591][ T5487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.796603][ T5487] Call Trace: [ 85.796609][ T5487] [ 85.796616][ T5487] __dump_stack+0x1d/0x30 [ 85.796639][ T5487] dump_stack_lvl+0x95/0xd0 [ 85.796739][ T5487] dump_stack+0x15/0x1b [ 85.796802][ T5487] should_fail_ex+0x262/0x280 [ 85.796829][ T5487] ? alloc_netdev_mqs+0x822/0xa90 [ 85.796875][ T5487] should_failslab+0x8c/0xb0 [ 85.796965][ T5487] __kmalloc_cache_noprof+0x7a/0x400 [ 85.797056][ T5487] ? alloc_netdev_mqs+0x822/0xa90 [ 85.797189][ T5487] alloc_netdev_mqs+0x822/0xa90 [ 85.797215][ T5487] rtnl_create_link+0x239/0x720 [ 85.797243][ T5487] rtnl_newlink_create+0x17a/0x4a0 [ 85.797313][ T5487] ? security_capable+0x7b/0x90 [ 85.797340][ T5487] ? netlink_ns_capable+0x86/0xa0 [ 85.797371][ T5487] rtnl_newlink+0x1255/0x1510 [ 85.797462][ T5487] ? __siphash_unaligned+0xab/0x2d0 [ 85.797503][ T5487] ? __memcg_slab_free_hook+0x154/0x340 [ 85.797530][ T5487] ? __rcu_read_unlock+0x4e/0x70 [ 85.797561][ T5487] ? avc_has_perm_noaudit+0xac/0x160 [ 85.797603][ T5487] ? cred_has_capability+0x224/0x2a0 [ 85.797705][ T5487] ? selinux_capable+0x31/0x40 [ 85.797767][ T5487] ? security_capable+0x7b/0x90 [ 85.797872][ T5487] ? ns_capable+0x80/0xb0 [ 85.797896][ T5487] ? __pfx_rtnl_newlink+0x10/0x10 [ 85.798025][ T5487] rtnetlink_rcv_msg+0x64b/0x720 [ 85.798182][ T5487] netlink_rcv_skb+0x11e/0x220 [ 85.798249][ T5487] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 85.798462][ T5487] rtnetlink_rcv+0x1c/0x30 [ 85.798562][ T5487] netlink_unicast+0x5a9/0x680 [ 85.798679][ T5487] netlink_sendmsg+0x5be/0x6f0 [ 85.798883][ T5487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.798960][ T5487] ____sys_sendmsg+0x532/0x580 [ 85.799099][ T5487] ___sys_sendmsg+0x195/0x1e0 [ 85.799227][ T5487] __x64_sys_sendmsg+0xd4/0x160 [ 85.799430][ T5487] x64_sys_call+0x22ab/0x2550 [ 85.799542][ T5487] do_syscall_64+0x112/0x360 [ 85.799638][ T5487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.799752][ T5487] RIP: 0033:0x7fe64f5ee1d9 [ 85.799874][ T5487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.799937][ T5487] RSP: 002b:00007fe64e047028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.800004][ T5487] RAX: ffffffffffffffda RBX: 00007fe64f875fa0 RCX: 00007fe64f5ee1d9 [ 85.800043][ T5487] RDX: 5821c98b097a09f2 RSI: 0000200000000240 RDI: 0000000000000006 [ 85.800119][ T5487] RBP: 00007fe64f685888 R08: 0000000000000000 R09: 0000000000000000 [ 85.800162][ T5487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.800204][ T5487] R13: 00007fe64f876038 R14: 00007fe64f875fa0 R15: 00007ffd024bfd68 [ 85.800327][ T5487] [ 86.117437][ T5495] FAULT_INJECTION: forcing a failure. [ 86.117437][ T5495] name failslab, interval 1, probability 0, space 0, times 0 [ 86.117466][ T5495] CPU: 1 UID: 0 PID: 5495 Comm: syz.3.511 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.117618][ T5495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.117636][ T5495] Call Trace: [ 86.117648][ T5495] [ 86.117657][ T5495] __dump_stack+0x1d/0x30 [ 86.117740][ T5495] dump_stack_lvl+0x95/0xd0 [ 86.117771][ T5495] dump_stack+0x15/0x1b [ 86.117830][ T5495] should_fail_ex+0x262/0x280 [ 86.117868][ T5495] ? __hw_addr_create+0x3f/0x140 [ 86.117899][ T5495] should_failslab+0x8c/0xb0 [ 86.117943][ T5495] __kmalloc_cache_noprof+0x7a/0x400 [ 86.118037][ T5495] ? __hw_addr_create+0x3f/0x140 [ 86.118058][ T5495] ? _raw_spin_unlock_irq+0x9/0x30 [ 86.118112][ T5495] __hw_addr_create+0x3f/0x140 [ 86.118137][ T5495] ? __hw_addr_add_ex+0x13c/0x310 [ 86.118230][ T5495] __hw_addr_add_ex+0x157/0x310 [ 86.118254][ T5495] ? __pfx_ip6gre_tap_setup+0x10/0x10 [ 86.118292][ T5495] dev_addr_init+0xb1/0x120 [ 86.118318][ T5495] alloc_netdev_mqs+0x1cc/0xa90 [ 86.118412][ T5495] rtnl_create_link+0x239/0x720 [ 86.118451][ T5495] rtnl_newlink_create+0x17a/0x4a0 [ 86.118477][ T5495] ? security_capable+0x7b/0x90 [ 86.118507][ T5495] ? netlink_ns_capable+0x86/0xa0 [ 86.118547][ T5495] rtnl_newlink+0x1255/0x1510 [ 86.118604][ T5495] ? __memcg_slab_free_hook+0x154/0x340 [ 86.118677][ T5495] ? __rcu_read_unlock+0x4e/0x70 [ 86.118785][ T5495] ? avc_has_perm_noaudit+0xac/0x160 [ 86.118892][ T5495] ? cred_has_capability+0x224/0x2a0 [ 86.118943][ T5495] ? selinux_capable+0x31/0x40 [ 86.118989][ T5495] ? security_capable+0x7b/0x90 [ 86.119097][ T5495] ? ns_capable+0x80/0xb0 [ 86.119193][ T5495] ? __pfx_rtnl_newlink+0x10/0x10 [ 86.119234][ T5495] rtnetlink_rcv_msg+0x64b/0x720 [ 86.119329][ T5495] netlink_rcv_skb+0x11e/0x220 [ 86.119353][ T5495] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 86.119414][ T5495] rtnetlink_rcv+0x1c/0x30 [ 86.119457][ T5495] netlink_unicast+0x5a9/0x680 [ 86.119567][ T5495] netlink_sendmsg+0x5be/0x6f0 [ 86.119603][ T5495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.119636][ T5495] ____sys_sendmsg+0x532/0x580 [ 86.119729][ T5495] ___sys_sendmsg+0x195/0x1e0 [ 86.119781][ T5495] __x64_sys_sendmsg+0xd4/0x160 [ 86.119822][ T5495] x64_sys_call+0x22ab/0x2550 [ 86.119939][ T5495] do_syscall_64+0x112/0x360 [ 86.119978][ T5495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.120010][ T5495] RIP: 0033:0x7fe64f5ee1d9 [ 86.120032][ T5495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.120059][ T5495] RSP: 002b:00007fe64e047028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.120152][ T5495] RAX: ffffffffffffffda RBX: 00007fe64f875fa0 RCX: 00007fe64f5ee1d9 [ 86.120178][ T5495] RDX: 0000000020040040 RSI: 0000200000000000 RDI: 0000000000000003 [ 86.120196][ T5495] RBP: 00007fe64f685888 R08: 0000000000000000 R09: 0000000000000000 [ 86.120215][ T5495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.120233][ T5495] R13: 00007fe64f876038 R14: 00007fe64f875fa0 R15: 00007ffd024bfd68 [ 86.120262][ T5495] [ 86.189166][ T5493] loop5: detected capacity change from 0 to 1024 [ 86.194216][ T5493] EXT4-fs: Ignoring removed bh option [ 86.194387][ T5493] EXT4-fs: Ignoring removed orlov option [ 86.210039][ T5493] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 86.259337][ T29] audit: type=1400 audit(1791778461.748:6432): avc: denied { create } for pid=5492 comm="syz.5.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 86.324564][ T29] audit: type=1400 audit(1791778461.818:6433): avc: denied { getopt } for pid=5492 comm="syz.5.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 86.544849][ T5501] FAULT_INJECTION: forcing a failure. [ 86.544849][ T5501] name failslab, interval 1, probability 0, space 0, times 0 [ 86.544992][ T5501] CPU: 1 UID: 0 PID: 5501 Comm: syz.4.514 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.545033][ T5501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.545053][ T5501] Call Trace: [ 86.545062][ T5501] [ 86.545073][ T5501] __dump_stack+0x1d/0x30 [ 86.545111][ T5501] dump_stack_lvl+0x95/0xd0 [ 86.545146][ T5501] dump_stack+0x15/0x1b [ 86.545197][ T5501] should_fail_ex+0x262/0x280 [ 86.545313][ T5501] ? ops_init+0x4b/0x2e0 [ 86.545341][ T5501] should_failslab+0x8c/0xb0 [ 86.545389][ T5501] __kmalloc_noprof+0xd0/0x4d0 [ 86.545515][ T5501] ? ops_init+0x4b/0x2e0 [ 86.545540][ T5501] ops_init+0x4b/0x2e0 [ 86.545564][ T5501] setup_net+0x9f/0x230 [ 86.545738][ T5501] copy_net_ns+0x333/0x490 [ 86.545852][ T5501] create_new_namespaces+0x1f6/0x420 [ 86.545904][ T5501] unshare_nsproxy_namespaces+0x115/0x150 [ 86.546006][ T5501] ksys_unshare+0x3fd/0x6f0 [ 86.546077][ T5501] __x64_sys_unshare+0x1f/0x30 [ 86.546161][ T5501] x64_sys_call+0x1e33/0x2550 [ 86.546201][ T5501] do_syscall_64+0x112/0x360 [ 86.546242][ T5501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.546276][ T5501] RIP: 0033:0x7f334873e1d9 [ 86.546299][ T5501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.546399][ T5501] RSP: 002b:00007f3347197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 86.546491][ T5501] RAX: ffffffffffffffda RBX: 00007f33489c5fa0 RCX: 00007f334873e1d9 [ 86.546513][ T5501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 86.546533][ T5501] RBP: 00007f33487d5888 R08: 0000000000000000 R09: 0000000000000000 [ 86.546552][ T5501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.546571][ T5501] R13: 00007f33489c6038 R14: 00007f33489c5fa0 R15: 00007ffca5fc4998 [ 86.546636][ T5501] [ 86.577906][ T29] audit: type=1400 audit(1791778462.068:6434): avc: denied { read } for pid=5502 comm="syz.3.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.636201][ T29] audit: type=1400 audit(1791778462.128:6435): avc: denied { connect } for pid=5502 comm="syz.3.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.673738][ T5510] FAULT_INJECTION: forcing a failure. [ 86.673738][ T5510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.673838][ T5510] CPU: 0 UID: 0 PID: 5510 Comm: syz.4.514 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.673977][ T5510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.674027][ T5510] Call Trace: [ 86.674049][ T5510] [ 86.674078][ T5510] __dump_stack+0x1d/0x30 [ 86.674173][ T5510] dump_stack_lvl+0x95/0xd0 [ 86.674253][ T5510] dump_stack+0x15/0x1b [ 86.674320][ T5510] should_fail_ex+0x262/0x280 [ 86.674459][ T5510] should_fail+0xb/0x20 [ 86.674553][ T5510] should_fail_usercopy+0x1a/0x20 [ 86.674648][ T5510] _copy_from_user+0x1c/0xb0 [ 86.674770][ T5510] proc_submiturb+0x43/0xa0 [ 86.674932][ T5510] usbdev_ioctl+0xc5d/0x16a0 [ 86.675078][ T5510] ? __pfx_usbdev_ioctl+0x10/0x10 [ 86.675183][ T5510] __se_sys_ioctl+0xce/0x140 [ 86.675315][ T5510] __x64_sys_ioctl+0x43/0x50 [ 86.675483][ T5510] x64_sys_call+0x239d/0x2550 [ 86.675570][ T5510] do_syscall_64+0x112/0x360 [ 86.675664][ T5510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.675805][ T5510] RIP: 0033:0x7f334873e1d9 [ 86.675874][ T5510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.675946][ T5510] RSP: 002b:00007f3347176028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.676018][ T5510] RAX: ffffffffffffffda RBX: 00007f33489c6090 RCX: 00007f334873e1d9 [ 86.676070][ T5510] RDX: 0000200000000840 RSI: 000000008038550a RDI: 0000000000000008 [ 86.676113][ T5510] RBP: 00007f3347176090 R08: 0000000000000000 R09: 0000000000000000 [ 86.676233][ T5510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.676355][ T5510] R13: 00007f33489c6128 R14: 00007f33489c6090 R15: 00007ffca5fc4998 [ 86.676393][ T5510] [ 86.707763][ T5508] netlink: 24 bytes leftover after parsing attributes in process `syz.5.517'. [ 86.713649][ T29] audit: type=1400 audit(1791778462.208:6436): avc: denied { ioctl } for pid=5502 comm="syz.3.515" path="socket:[12555]" dev="sockfs" ino=12555 ioctlcmd=0x6f02 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.757288][ T5506] FAULT_INJECTION: forcing a failure. [ 86.757288][ T5506] name failslab, interval 1, probability 0, space 0, times 0 [ 86.757404][ T5506] CPU: 0 UID: 0 PID: 5506 Comm: syz.1.513 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.757584][ T5506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.757662][ T5506] Call Trace: [ 86.757684][ T5506] [ 86.757715][ T5506] __dump_stack+0x1d/0x30 [ 86.757803][ T5506] dump_stack_lvl+0x95/0xd0 [ 86.757894][ T5506] dump_stack+0x15/0x1b [ 86.758045][ T5506] should_fail_ex+0x262/0x280 [ 86.758149][ T5506] ? __proc_create+0x3f1/0x6b0 [ 86.758246][ T5506] should_failslab+0x8c/0xb0 [ 86.758406][ T5506] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 86.758550][ T5506] ? __proc_create+0x3f1/0x6b0 [ 86.758672][ T5506] __proc_create+0x3f1/0x6b0 [ 86.758825][ T5506] proc_create_reg+0x87/0xe0 [ 86.758947][ T5506] proc_create_net_data+0x59/0x100 [ 86.759143][ T5506] dev_proc_net_init+0xa5/0x110 [ 86.759257][ T5506] ops_init+0x22a/0x2e0 [ 86.759331][ T5506] setup_net+0x9f/0x230 [ 86.759498][ T5506] copy_net_ns+0x333/0x490 [ 86.759533][ T5506] create_new_namespaces+0x1f6/0x420 [ 86.759659][ T5506] unshare_nsproxy_namespaces+0x115/0x150 [ 86.759805][ T5506] ksys_unshare+0x3fd/0x6f0 [ 86.759919][ T5506] __x64_sys_unshare+0x1f/0x30 [ 86.760023][ T5506] x64_sys_call+0x1e33/0x2550 [ 86.760190][ T5506] do_syscall_64+0x112/0x360 [ 86.760243][ T5506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.760391][ T5506] RIP: 0033:0x7f3b242fe1d9 [ 86.760454][ T5506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.760527][ T5506] RSP: 002b:00007f3b22d57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 86.760601][ T5506] RAX: ffffffffffffffda RBX: 00007f3b24585fa0 RCX: 00007f3b242fe1d9 [ 86.760682][ T5506] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 86.760734][ T5506] RBP: 00007f3b24395888 R08: 0000000000000000 R09: 0000000000000000 [ 86.760920][ T5506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.761042][ T5506] R13: 00007f3b24586038 R14: 00007f3b24585fa0 R15: 00007fffe0d73f18 [ 86.761118][ T5506] [ 87.088762][ T5522] netlink: 24 bytes leftover after parsing attributes in process `syz.5.519'. [ 87.246859][ T5525] netlink: 28 bytes leftover after parsing attributes in process `syz.4.521'. [ 87.262655][ T5527] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.523'. [ 87.280687][ T5525] loop4: detected capacity change from 0 to 512 [ 87.347320][ T5532] loop1: detected capacity change from 0 to 512 [ 87.359881][ T5532] EXT4-fs: Ignoring removed bh option [ 87.379333][ T5532] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 87.379953][ T5532] EXT4-fs (loop1): 1 truncate cleaned up [ 87.380457][ T5532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.412371][ T5532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.524'. [ 87.412885][ T5534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.525'. [ 87.439082][ T5532] team0: Port device team_slave_0 removed [ 87.457678][ T5534] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.476343][ T29] audit: type=1400 audit(1791778462.968:6437): avc: denied { ioctl } for pid=5531 comm="syz.1.524" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 87.508770][ T5534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.525'. [ 87.572303][ T5537] loop0: detected capacity change from 0 to 512 [ 87.587503][ T5537] EXT4-fs: quotafile must be on filesystem root [ 87.615931][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.879785][ T5558] loop1: detected capacity change from 0 to 1024 [ 87.880321][ T5558] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.881818][ T5558] EXT4-fs: inline encryption not supported [ 87.881862][ T5558] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.915208][ T5558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 87.915301][ T5558] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.988093][ T5564] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 88.716672][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 88.887961][ T5584] loop1: detected capacity change from 0 to 2048 [ 88.954560][ T5584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.954686][ T5584] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.970301][ T5584] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.540: bg 0: block 345: padding at end of block bitmap is not set [ 89.035104][ T5590] loop5: detected capacity change from 0 to 1024 [ 89.058456][ T5590] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 89.059267][ T5590] JBD2: no valid journal superblock found [ 89.059282][ T5590] EXT4-fs (loop5): Could not load journal inode [ 89.701815][ T5596] FAT-fs (loop3): data area starts beyond volume (274 > 64) [ 89.701850][ T5596] FAT-fs (loop3): Can't find a valid FAT filesystem [ 89.750067][ T5600] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.809384][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.924486][ T5604] set_capacity_and_notify: 3 callbacks suppressed [ 89.924509][ T5604] loop0: detected capacity change from 0 to 512 [ 89.925278][ T5604] EXT4-fs: quotafile must be on filesystem root [ 90.120595][ T5587] loop3: detected capacity change from 0 to 1764 [ 90.159395][ T5606] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 90.164999][ T5606] team0: Device ipvlan2 is already an upper device of the team interface [ 90.235438][ T5622] FAULT_INJECTION: forcing a failure. [ 90.235438][ T5622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.235483][ T5622] CPU: 1 UID: 0 PID: 5622 Comm: syz.1.550 Not tainted syzkaller #0 PREEMPT(lazy) [ 90.235521][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.235589][ T5622] Call Trace: [ 90.235599][ T5622] [ 90.235610][ T5622] __dump_stack+0x1d/0x30 [ 90.235648][ T5622] dump_stack_lvl+0x95/0xd0 [ 90.235691][ T5622] dump_stack+0x15/0x1b [ 90.235723][ T5622] should_fail_ex+0x262/0x280 [ 90.235772][ T5622] should_fail+0xb/0x20 [ 90.235807][ T5622] should_fail_usercopy+0x1a/0x20 [ 90.235899][ T5622] _copy_from_user+0x1c/0xb0 [ 90.236015][ T5622] ___sys_sendmsg+0xc1/0x1e0 [ 90.236106][ T5622] __x64_sys_sendmsg+0xd4/0x160 [ 90.236206][ T5622] x64_sys_call+0x22ab/0x2550 [ 90.236300][ T5622] do_syscall_64+0x112/0x360 [ 90.236343][ T5622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.236378][ T5622] RIP: 0033:0x7f3b242fe1d9 [ 90.236402][ T5622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.236429][ T5622] RSP: 002b:00007f3b22d57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.236503][ T5622] RAX: ffffffffffffffda RBX: 00007f3b24585fa0 RCX: 00007f3b242fe1d9 [ 90.236525][ T5622] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 90.236545][ T5622] RBP: 00007f3b22d57090 R08: 0000000000000000 R09: 0000000000000000 [ 90.236614][ T5622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.236635][ T5622] R13: 00007f3b24586038 R14: 00007f3b24585fa0 R15: 00007fffe0d73f18 [ 90.236665][ T5622] [ 90.511171][ T5630] loop5: detected capacity change from 0 to 128 [ 90.541455][ T5630] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 90.582351][ T5635] random: crng reseeded on system resumption [ 90.582468][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 90.582485][ T29] audit: type=1400 audit(1791778466.078:6447): avc: denied { write } for pid=5634 comm="syz.0.555" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 90.583693][ T3289] udevd[3289]: incorrect ext4 checksum on /dev/loop5 [ 90.594920][ T29] audit: type=1400 audit(1791778466.088:6448): avc: denied { ioctl } for pid=5634 comm="syz.0.555" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 90.612963][ T5635] Restarting kernel threads ... [ 90.613475][ T5635] Done restarting kernel threads. [ 90.614130][ T5635] FAULT_INJECTION: forcing a failure. [ 90.614130][ T5635] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 90.614232][ T5635] CPU: 0 UID: 0 PID: 5635 Comm: syz.0.555 Not tainted syzkaller #0 PREEMPT(lazy) [ 90.614358][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.614449][ T5635] Call Trace: [ 90.614481][ T5635] [ 90.614514][ T5635] __dump_stack+0x1d/0x30 [ 90.614680][ T5635] dump_stack_lvl+0x95/0xd0 [ 90.614771][ T5635] dump_stack+0x15/0x1b [ 90.614853][ T5635] should_fail_ex+0x262/0x280 [ 90.614979][ T5635] should_fail_alloc_page+0xf2/0x100 [ 90.615188][ T5635] __alloc_frozen_pages_noprof+0x157/0x400 [ 90.615292][ T5635] alloc_pages_mpol+0xaf/0x1d0 [ 90.615386][ T5635] alloc_pages_noprof+0x94/0x140 [ 90.615489][ T5635] get_zeroed_page_noprof+0x1a/0x40 [ 90.615644][ T5635] get_image_page+0x2b/0x420 [ 90.615748][ T5635] snapshot_write_next+0x657/0x1b10 [ 90.615841][ T5635] ? __rcu_read_unlock+0x4e/0x70 [ 90.615968][ T5635] ? _parse_integer_limit+0x174/0x190 [ 90.616070][ T5635] ? __import_iovec+0x428/0x530 [ 90.616195][ T5635] ? mutex_lock+0x57/0x90 [ 90.616340][ T5635] snapshot_write+0xc5/0x180 [ 90.616484][ T5635] vfs_writev+0x420/0x8c0 [ 90.616593][ T5635] ? __pfx_snapshot_write+0x10/0x10 [ 90.616719][ T5635] do_writev+0xe9/0x210 [ 90.616812][ T5635] __x64_sys_writev+0x45/0x50 [ 90.616917][ T5635] x64_sys_call+0x23c9/0x2550 [ 90.617022][ T5635] do_syscall_64+0x112/0x360 [ 90.617119][ T5635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.617212][ T5635] RIP: 0033:0x7f0f9f21e1d9 [ 90.617273][ T5635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.617396][ T5635] RSP: 002b:00007f0f9dc77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 90.617475][ T5635] RAX: ffffffffffffffda RBX: 00007f0f9f4a5fa0 RCX: 00007f0f9f21e1d9 [ 90.617532][ T5635] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000003 [ 90.617591][ T5635] RBP: 00007f0f9dc77090 R08: 0000000000000000 R09: 0000000000000000 [ 90.617638][ T5635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.617693][ T5635] R13: 00007f0f9f4a6038 R14: 00007f0f9f4a5fa0 R15: 00007ffe35956a38 [ 90.617824][ T5635] [ 91.186348][ T29] audit: type=1400 audit(1791778466.678:6449): avc: denied { read write } for pid=5644 comm="syz.0.557" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 91.212695][ T29] audit: type=1400 audit(1791778466.678:6450): avc: denied { open } for pid=5644 comm="syz.0.557" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 91.403572][ T5655] loop0: detected capacity change from 0 to 512 [ 91.430015][ T5660] loop4: detected capacity change from 0 to 2048 [ 91.463991][ T5660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.511395][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.552144][ T5655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.552302][ T5655] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.598649][ T5669] netlink: 'syz.5.563': attribute type 39 has an invalid length. [ 91.648229][ T5676] __nla_validate_parse: 1 callbacks suppressed [ 91.648247][ T5676] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.566'. [ 91.765164][ T5683] loop3: detected capacity change from 0 to 512 [ 91.796556][ T5683] EXT4-fs: quotafile must be on filesystem root [ 91.930209][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.285911][ T5698] loop4: detected capacity change from 0 to 512 [ 92.286461][ T5698] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 92.363710][ T5708] netlink: 256 bytes leftover after parsing attributes in process `syz.1.573'. [ 92.367355][ T5708] syzkaller1: entered promiscuous mode [ 92.367378][ T5708] syzkaller1: entered allmulticast mode [ 92.389055][ T29] audit: type=1400 audit(1791778467.888:6451): avc: denied { read append } for pid=5707 comm="syz.1.573" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 92.389176][ T29] audit: type=1400 audit(1791778467.888:6452): avc: denied { open } for pid=5707 comm="syz.1.573" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 92.389509][ T29] audit: type=1400 audit(1791778467.888:6453): avc: denied { ioctl } for pid=5707 comm="syz.1.573" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 92.491072][ T5710] loop4: detected capacity change from 0 to 1024 [ 92.491977][ T5710] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 92.492859][ T5710] JBD2: no valid journal superblock found [ 92.492869][ T5710] EXT4-fs (loop4): Could not load journal inode [ 92.837163][ T5735] loop0: detected capacity change from 0 to 512 [ 92.852712][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.586'. [ 92.852747][ T5737] netlink: 32 bytes leftover after parsing attributes in process `syz.5.586'. [ 92.853773][ T5735] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.585: missing EA_INODE flag [ 92.853804][ T5735] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 92.854236][ T5735] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.585: error while reading EA inode 12 err=-117 [ 92.854273][ T5735] loop0: lost filesystem error report for type 5 error -117 [ 92.854544][ T5735] EXT4-fs (loop0): 1 orphan inode deleted [ 92.855124][ T5735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.100634][ T5746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.589'. [ 93.101197][ T5746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 93.101232][ T5746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.589'. [ 93.136970][ T5746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 93.137006][ T5746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.589'. [ 93.151071][ T5285] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.151532][ T80] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.151645][ T80] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.151749][ T80] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.159018][ T29] audit: type=1400 audit(1791778468.658:6454): avc: denied { shutdown } for pid=5745 comm="syz.3.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.266539][ T5750] random: crng reseeded on system resumption [ 93.352141][ T29] audit: type=1326 audit(1791778468.838:6455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.3.593" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64f5ee1d9 code=0x7ffc0000 [ 93.378107][ T29] audit: type=1326 audit(1791778468.838:6456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.3.593" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64f5ee1d9 code=0x7ffc0000 [ 93.411247][ T5750] loop5: detected capacity change from 0 to 128 [ 93.434970][ T5750] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.440669][ T5750] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.443608][ T5758] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 93.443642][ T5758] System zones: 1-12 [ 93.444599][ T5758] EXT4-fs (loop4): 1 truncate cleaned up [ 93.445741][ T5758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.536330][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.614980][ T5765] EXT4-fs (loop3): 1 truncate cleaned up [ 93.615397][ T5765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.639166][ T5765] FAULT_INJECTION: forcing a failure. [ 93.639166][ T5765] name failslab, interval 1, probability 0, space 0, times 0 [ 93.639203][ T5765] CPU: 1 UID: 0 PID: 5765 Comm: syz.3.596 Not tainted syzkaller #0 PREEMPT(lazy) [ 93.639284][ T5765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.639301][ T5765] Call Trace: [ 93.639311][ T5765] [ 93.639322][ T5765] __dump_stack+0x1d/0x30 [ 93.639356][ T5765] dump_stack_lvl+0x95/0xd0 [ 93.639381][ T5765] dump_stack+0x15/0x1b [ 93.639481][ T5765] should_fail_ex+0x262/0x280 [ 93.639520][ T5765] ? do_getname+0x2e/0x1c0 [ 93.639550][ T5765] should_failslab+0x8c/0xb0 [ 93.639636][ T5765] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 93.639761][ T5765] ? do_getname+0x2e/0x1c0 [ 93.639791][ T5765] ? vfs_write+0x850/0x9a0 [ 93.639839][ T5765] do_getname+0x2e/0x1c0 [ 93.639934][ T5765] getname_flags+0x1d/0x30 [ 93.639964][ T5765] do_sys_openat2+0x6c/0x130 [ 93.640016][ T5765] __x64_sys_openat+0xf2/0x120 [ 93.640054][ T5765] x64_sys_call+0x1f72/0x2550 [ 93.640089][ T5765] do_syscall_64+0x112/0x360 [ 93.640123][ T5765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.640265][ T5765] RIP: 0033:0x7fe64f5ee1d9 [ 93.640282][ T5765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.640302][ T5765] RSP: 002b:00007fe64e047028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 93.640329][ T5765] RAX: ffffffffffffffda RBX: 00007fe64f875fa0 RCX: 00007fe64f5ee1d9 [ 93.640348][ T5765] RDX: 000000000000275a RSI: 0000200000000240 RDI: ffffffffffffff9c [ 93.640367][ T5765] RBP: 00007fe64e047090 R08: 0000000000000000 R09: 0000000000000000 [ 93.640394][ T5765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.640412][ T5765] R13: 00007fe64f876038 R14: 00007fe64f875fa0 R15: 00007ffd024bfd68 [ 93.640433][ T5765] [ 93.712926][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.835456][ T5750] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.892062][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.131634][ T5795] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.605: Unrecognised inode hash code 255 [ 94.131670][ T5795] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.605: Corrupt directory, running e2fsck is recommended [ 94.166340][ T5791] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.190892][ T5793] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.190938][ T5793] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.213717][ T5793] EXT4-fs (loop1): 1 orphan inode deleted [ 94.214160][ T5793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.223971][ T5795] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 94.224129][ T5795] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.605: corrupted in-inode xattr: invalid ea_ino [ 94.224223][ T5795] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.238047][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 94.238120][ C1] EXT4-fs (loop3): initial error at time 1791778469: ext4_iget_extra_inode:5210: inode 15 [ 94.238214][ C1] EXT4-fs (loop3): last error at time 1791778469: ext4_iget_extra_inode:5210: inode 15 [ 94.240067][ T5795] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.605: couldn't read orphan inode 15 (err -117) [ 94.240232][ T5795] loop3: lost filesystem error report for type 5 error -117 [ 94.241473][ T5795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.307007][ T5802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.606'. [ 94.394609][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.553961][ T5795] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.605: Unrecognised inode hash code 255 [ 94.554122][ T5795] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.605: Corrupt directory, running e2fsck is recommended [ 94.790094][ T5821] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 94.790128][ T5821] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 94.792771][ T5821] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 94.792815][ T5821] System zones: 1-12 [ 94.793180][ T5821] EXT4-fs (loop4): 1 truncate cleaned up [ 94.793685][ T5821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.859068][ T5821] sch_tbf: peakrate 3 is lower than or equals to rate 6 ! [ 94.903855][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.925549][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.019571][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.021254][ T5831] FAULT_INJECTION: forcing a failure. [ 95.021254][ T5831] name fail_futex, interval 1, probability 0, space 0, times 1 [ 95.021344][ T5831] CPU: 1 UID: 0 PID: 5831 Comm: syz.0.614 Not tainted syzkaller #0 PREEMPT(lazy) [ 95.021375][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.021388][ T5831] Call Trace: [ 95.021396][ T5831] [ 95.021404][ T5831] __dump_stack+0x1d/0x30 [ 95.021513][ T5831] dump_stack_lvl+0x95/0xd0 [ 95.021546][ T5831] dump_stack+0x15/0x1b [ 95.021577][ T5831] should_fail_ex+0x262/0x280 [ 95.021615][ T5831] should_fail+0xb/0x20 [ 95.021640][ T5831] get_futex_key+0x12d/0xb10 [ 95.021706][ T5831] futex_wake+0x89/0x400 [ 95.021804][ T5831] do_futex+0x3f8/0x460 [ 95.021921][ T5831] ? kmem_cache_free+0x106/0x3b0 [ 95.021952][ T5831] __se_sys_futex+0x2f6/0x370 [ 95.022061][ T5831] __x64_sys_futex+0x78/0x90 [ 95.022098][ T5831] x64_sys_call+0x22e2/0x2550 [ 95.022128][ T5831] do_syscall_64+0x112/0x360 [ 95.022170][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.022260][ T5831] RIP: 0033:0x7f0f9f21e1d9 [ 95.022283][ T5831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.022309][ T5831] RSP: 002b:00007f0f9dc770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 95.022333][ T5831] RAX: ffffffffffffffda RBX: 00007f0f9f4a5fa8 RCX: 00007f0f9f21e1d9 [ 95.022349][ T5831] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0f9f4a5fac [ 95.022367][ T5831] RBP: 00007f0f9f4a5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 95.022382][ T5831] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 95.022481][ T5831] R13: 00007f0f9f4a6038 R14: 00007ffe35956950 R15: 00007ffe35956a38 [ 95.022512][ T5831] [ 95.167318][ T5827] set_capacity_and_notify: 8 callbacks suppressed [ 95.167418][ T5827] loop4: detected capacity change from 0 to 764 [ 95.182681][ T5827] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 95.366373][ T5845] loop1: detected capacity change from 0 to 512 [ 95.373333][ T5845] ext3: Bad value for 'inode_readahead_blks' [ 95.719453][ T5875] loop4: detected capacity change from 0 to 1024 [ 95.728803][ T5875] EXT4-fs: inline encryption not supported [ 95.728986][ T5875] EXT4-fs: Ignoring removed bh option [ 95.733496][ T5875] /dev/loop4: Can't open blockdev [ 95.739056][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 95.739144][ T29] audit: type=1400 audit(1791778471.238:6642): avc: denied { write } for pid=5874 comm="syz.4.632" path="socket:[13712]" dev="sockfs" ino=13712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 95.790036][ T5873] loop3: detected capacity change from 0 to 512 [ 95.807109][ T5873] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.814239][ T5873] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 95.814291][ T5873] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.822981][ T5873] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.631: corrupted in-inode xattr: invalid ea_ino [ 95.823096][ T5873] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.823707][ T5873] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.631: couldn't read orphan inode 15 (err -117) [ 95.823797][ T5873] loop3: lost filesystem error report for type 5 error -117 [ 95.826825][ T5873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.878669][ T29] audit: type=1400 audit(1791778471.378:6643): avc: denied { bind } for pid=5881 comm="syz.5.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.879485][ T5882] netlink: 'syz.5.633': attribute type 40 has an invalid length. [ 95.919023][ T5882] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 95.919053][ T5882] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 95.919090][ T5882] vhci_hcd vhci_hcd.0: Device attached [ 95.920237][ T5882] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(10) [ 95.920259][ T5882] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 95.920289][ T5882] vhci_hcd vhci_hcd.0: Device attached [ 95.921083][ T5882] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(13) [ 95.921172][ T5882] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 95.921209][ T5882] vhci_hcd vhci_hcd.0: Device attached [ 95.921942][ T5882] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(15) [ 95.921962][ T5882] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 95.922035][ T5882] vhci_hcd vhci_hcd.0: Device attached [ 95.925844][ T5890] vhci_hcd: connection closed [ 95.926110][ T5285] vhci_hcd vhci_hcd.5: stop threads [ 95.926133][ T5285] vhci_hcd vhci_hcd.5: release socket [ 95.926154][ T5885] vhci_hcd: connection closed [ 95.926152][ T5285] vhci_hcd vhci_hcd.5: disconnect device [ 95.926330][ T5888] vhci_hcd: connection closed [ 95.926505][ T5892] vhci_hcd: connection closed [ 95.926947][ T5285] vhci_hcd vhci_hcd.5: stop threads [ 95.926966][ T5285] vhci_hcd vhci_hcd.5: release socket [ 95.926984][ T5285] vhci_hcd vhci_hcd.5: disconnect device [ 96.043746][ T5285] vhci_hcd vhci_hcd.5: stop threads [ 96.043845][ T5285] vhci_hcd vhci_hcd.5: release socket [ 96.043872][ T5285] vhci_hcd vhci_hcd.5: disconnect device [ 96.065875][ T5285] vhci_hcd vhci_hcd.5: stop threads [ 96.065901][ T5285] vhci_hcd vhci_hcd.5: release socket [ 96.065929][ T5285] vhci_hcd vhci_hcd.5: disconnect device [ 96.103540][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.154357][ T29] audit: type=1400 audit(1791778471.648:6644): avc: denied { bind } for pid=5900 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.154922][ T29] audit: type=1400 audit(1791778471.648:6645): avc: denied { listen } for pid=5900 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.157692][ T29] audit: type=1400 audit(1791778471.648:6646): avc: denied { connect } for pid=5900 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.157785][ T29] audit: type=1400 audit(1791778471.648:6647): avc: denied { accept } for pid=5900 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.157818][ T29] audit: type=1400 audit(1791778471.648:6648): avc: denied { mounton } for pid=5900 comm="syz.3.637" path="/135/mydev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 96.177797][ T29] audit: type=1400 audit(1791778471.658:6649): avc: denied { write } for pid=5900 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.177914][ T29] audit: type=1400 audit(1791778471.658:6650): avc: denied { read } for pid=5900 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.217593][ T29] audit: type=1400 audit(1791778471.698:6651): avc: denied { shutdown } for pid=5900 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.481160][ T5926] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 96.516798][ T5928] sch_tbf: peakrate 3 is lower than or equals to rate 6 ! [ 96.647605][ T5938] loop4: detected capacity change from 0 to 512 [ 96.654257][ T5938] EXT4-fs: Ignoring removed nobh option [ 96.654324][ T5938] EXT4-fs: Ignoring removed nobh option [ 96.667692][ T5938] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 96.680057][ T5931] loop5: detected capacity change from 0 to 512 [ 96.697596][ T5931] EXT4-fs: inline encryption not supported [ 96.706534][ T5938] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #3: comm syz.4.651: corrupted inode contents [ 96.706567][ T5938] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 96.707739][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 96.707767][ C1] EXT4-fs (loop4): initial error at time 1791778472: ext4_do_update_inode:5801: inode 3 [ 96.707805][ C1] EXT4-fs (loop4): last error at time 1791778472: ext4_do_update_inode:5801: inode 3 [ 96.712621][ T5938] EXT4-fs error (device loop4): ext4_dirty_inode:6736: inode #3: comm syz.4.651: mark_inode_dirty error [ 96.712716][ T5938] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 96.717038][ T5938] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #3: comm syz.4.651: corrupted inode contents [ 96.717145][ T5938] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 96.719652][ T5938] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.651: mark_inode_dirty error [ 96.719782][ T5938] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 96.723494][ T5938] EXT4-fs error (device loop4): ext4_acquire_dquot:7070: comm syz.4.651: Failed to acquire dquot type 0 [ 96.723640][ T5938] loop4: lost filesystem error report for type 5 error -117 [ 96.729882][ T5938] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.651: corrupted inode contents [ 96.729966][ T5938] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 96.733468][ T5938] EXT4-fs error (device loop4): ext4_dirty_inode:6736: inode #16: comm syz.4.651: mark_inode_dirty error [ 96.733492][ T5938] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 96.734005][ T5938] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.651: corrupted inode contents [ 96.734109][ T5938] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 96.734503][ T5938] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.651: mark_inode_dirty error [ 96.734987][ T5938] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.651: corrupted inode contents [ 96.735446][ T5938] EXT4-fs error (device loop4) in ext4_orphan_del:304: Corrupt filesystem [ 96.735506][ T5938] loop4: lost filesystem error report for type 5 error -117 [ 96.737438][ T5938] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.651: corrupted inode contents [ 96.742983][ T5938] EXT4-fs error (device loop4): ext4_truncate:4721: inode #16: comm syz.4.651: mark_inode_dirty error [ 96.743454][ T5938] EXT4-fs error (device loop4) in ext4_process_orphan:346: Corrupt filesystem [ 96.743515][ T5938] loop4: lost filesystem error report for type 5 error -117 [ 96.744634][ T5938] EXT4-fs (loop4): 1 truncate cleaned up [ 96.745628][ T5938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.760697][ T5938] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.766611][ T5941] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #3: comm syz.4.651: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 96.766611][ T5941] [ 96.842278][ T5931] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 96.843984][ T5931] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.648: invalid indirect mapped block 2683928664 (level 1) [ 96.847810][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 96.847863][ C1] EXT4-fs (loop5): initial error at time 1791778472: ext4_free_branches:1023: inode 13 [ 96.847957][ C1] EXT4-fs (loop5): last error at time 1791778472: ext4_free_branches:1023: inode 13 [ 96.848829][ T5931] EXT4-fs (loop5): 1 truncate cleaned up [ 96.850013][ T5931] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.977159][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.126626][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.318109][ T3903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.362862][ T5965] __nla_validate_parse: 4 callbacks suppressed [ 97.362882][ T5965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.662'. [ 97.362910][ T5965] netlink: 30 bytes leftover after parsing attributes in process `syz.1.662'. [ 97.362932][ T5965] netlink: 30 bytes leftover after parsing attributes in process `syz.1.662'. [ 97.367856][ T5959] netlink: 'syz.3.659': attribute type 39 has an invalid length. [ 97.408200][ T5965] loop1: detected capacity change from 0 to 1024 [ 97.408672][ T5965] ext4: Unknown parameter '' [ 97.509762][ T5974] loop3: detected capacity change from 0 to 512 [ 97.512039][ T5974] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 97.512058][ T5974] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.519117][ T5974] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.659: bad orphan inode 131072 [ 97.519153][ T5974] loop3: lost filesystem error report for type 5 error -117 [ 97.536428][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 97.536459][ C0] EXT4-fs (loop3): initial error at time 1791778473: ext4_orphan_get:1429 [ 97.536486][ C0] EXT4-fs (loop3): last error at time 1791778473: ext4_orphan_get:1429 [ 97.591450][ T5974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.660844][ T5981] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 97.689318][ T5976] loop4: detected capacity change from 0 to 256 [ 97.724529][ T5976] FAT-fs (loop4): IO charset cp1255 not found [ 97.753860][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.893015][ T5993] FAULT_INJECTION: forcing a failure. [ 97.893015][ T5993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.893054][ T5993] CPU: 0 UID: 0 PID: 5993 Comm: syz.3.669 Not tainted syzkaller #0 PREEMPT(lazy) [ 97.893087][ T5993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.893101][ T5993] Call Trace: [ 97.893108][ T5993] [ 97.893145][ T5993] __dump_stack+0x1d/0x30 [ 97.893175][ T5993] dump_stack_lvl+0x95/0xd0 [ 97.893205][ T5993] dump_stack+0x15/0x1b [ 97.893233][ T5993] should_fail_ex+0x262/0x280 [ 97.893272][ T5993] should_fail+0xb/0x20 [ 97.893364][ T5993] should_fail_usercopy+0x1a/0x20 [ 97.893468][ T5993] _copy_from_user+0x1c/0xb0 [ 97.893524][ T5993] __sys_bpf+0x1e2/0xc30 [ 97.893590][ T5993] ? get_pid_task+0x92/0xc0 [ 97.893615][ T5993] ? vfs_write+0x7b0/0x9a0 [ 97.893804][ T5993] __x64_sys_bpf+0x69/0x80 [ 97.893829][ T5993] x64_sys_call+0xf26/0x2550 [ 97.893862][ T5993] do_syscall_64+0x112/0x360 [ 97.893898][ T5993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.893963][ T5993] RIP: 0033:0x7fe64f5ee1d9 [ 97.893981][ T5993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.894001][ T5993] RSP: 002b:00007fe64e047028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.894026][ T5993] RAX: ffffffffffffffda RBX: 00007fe64f875fa0 RCX: 00007fe64f5ee1d9 [ 97.894049][ T5993] RDX: 0000000000000010 RSI: 0000200000000780 RDI: 000000000000001c [ 97.894063][ T5993] RBP: 00007fe64e047090 R08: 0000000000000000 R09: 0000000000000000 [ 97.894080][ T5993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.894097][ T5993] R13: 00007fe64f876038 R14: 00007fe64f875fa0 R15: 00007ffd024bfd68 [ 97.894119][ T5993] [ 98.098642][ T6001] loop3: detected capacity change from 0 to 256 [ 98.112442][ T6001] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.129808][ T6001] random: crng reseeded on system resumption [ 98.169711][ T3303] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 98.169747][ T3303] FAT-fs (loop3): Filesystem has been set read-only [ 98.169820][ T3303] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 98.255089][ T3629] tipc: Resetting bearer [ 98.264022][ T3629] tipc: Disabling bearer [ 98.399088][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.679'. [ 98.469885][ T6021] EXT4-fs: Ignoring removed bh option [ 98.470213][ T6021] /dev/loop4: Can't open blockdev [ 98.534173][ T5285] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.534244][ T5285] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.583777][ T5285] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.583899][ T5285] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.621539][ T5285] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.621712][ T5285] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.635592][ T6023] netlink: 20 bytes leftover after parsing attributes in process `syz.4.682'. [ 98.660862][ T5285] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.660925][ T5285] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.789601][ T5285] bridge_slave_1: left allmulticast mode [ 98.789627][ T5285] bridge_slave_1: left promiscuous mode [ 98.789834][ T5285] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.793097][ T5285] bridge_slave_0: left allmulticast mode [ 98.793148][ T5285] bridge_slave_0: left promiscuous mode [ 98.793372][ T5285] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.895332][ T5285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.897635][ T5285] bond0 (unregistering): Released all slaves [ 98.949934][ T5285] tipc: Left network mode [ 98.957001][ T5285] hsr_slave_0: left promiscuous mode [ 98.957309][ T5285] hsr_slave_1: left promiscuous mode [ 98.968767][ T5285] veth1_macvtap: left promiscuous mode [ 98.968851][ T5285] veth0_macvtap: left promiscuous mode [ 98.969054][ T5285] veth1_vlan: left promiscuous mode [ 98.969217][ T5285] veth0_vlan: left promiscuous mode [ 99.201224][ T5285] team0 (unregistering): Port device team_slave_1 removed [ 99.226929][ T5285] team0 (unregistering): Port device team_slave_0 removed [ 99.275870][ T6042] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 99.366744][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 99.571118][ T5285] IPVS: stop unused estimator thread 0... [ 99.579621][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.579780][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.579922][ T6024] bridge_slave_0: entered allmulticast mode [ 99.580967][ T6024] bridge_slave_0: entered promiscuous mode [ 99.583027][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.583172][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.583320][ T6024] bridge_slave_1: entered allmulticast mode [ 99.584394][ T6024] bridge_slave_1: entered promiscuous mode [ 99.607505][ T6024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.610098][ T6024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.630383][ T6024] team0: Port device team_slave_0 added [ 99.632187][ T6024] team0: Port device team_slave_1 added [ 99.652875][ T6024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.652913][ T6024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.653008][ T6024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.654356][ T6024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.654397][ T6024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.654572][ T6024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.717160][ T6024] hsr_slave_0: entered promiscuous mode [ 99.722276][ T6024] hsr_slave_1: entered promiscuous mode [ 99.722609][ T6024] debugfs: 'hsr0' already exists in 'hsr' [ 99.722625][ T6024] Cannot create hsr debugfs directory [ 99.832474][ T6087] EXT4-fs: Ignoring removed bh option [ 99.853138][ T6087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.853241][ T6087] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.923481][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 100.023115][ T6100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.023137][ T6024] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 100.023160][ T6100] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.026218][ T6024] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.027071][ T6024] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 100.030494][ T6100] EXT4-fs (loop1): 1 orphan inode deleted [ 100.031474][ T6100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.089009][ T6024] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.089813][ T6024] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 100.095877][ T6024] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.096642][ T6024] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 100.102918][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.140019][ T6024] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.189631][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.189679][ T6024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.189790][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.189847][ T6024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.211305][ T6119] sit0: entered promiscuous mode [ 100.246010][ T6119] netlink: 'syz.0.697': attribute type 1 has an invalid length. [ 100.246035][ T6119] netlink: 1 bytes leftover after parsing attributes in process `syz.0.697'. [ 100.350836][ T6024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.370600][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 100.388205][ T5285] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.389328][ T5285] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.397536][ T6024] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.412367][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.430956][ T5285] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.431001][ T5285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.436933][ T5285] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.436966][ T5285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.691096][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.703687][ T6024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.780901][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 100.780922][ T29] audit: type=1400 audit(1791778476.278:6899): avc: denied { write } for pid=6158 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.919992][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 100.954875][ T6170] set_capacity_and_notify: 5 callbacks suppressed [ 100.954906][ T6170] loop1: detected capacity change from 0 to 1024 [ 100.955300][ T6170] EXT4-fs: Ignoring removed orlov option [ 101.046794][ T6170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.222781][ T5285] IPVS: starting estimator thread 0... [ 101.233510][ T6186] FAULT_INJECTION: forcing a failure. [ 101.233510][ T6186] name fail_futex, interval 1, probability 0, space 0, times 0 [ 101.233620][ T6186] CPU: 1 UID: 0 PID: 6186 Comm: syz.0.706 Not tainted syzkaller #0 PREEMPT(lazy) [ 101.233645][ T6186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.233663][ T6186] Call Trace: [ 101.233672][ T6186] [ 101.233683][ T6186] __dump_stack+0x1d/0x30 [ 101.233719][ T6186] dump_stack_lvl+0x95/0xd0 [ 101.233777][ T6186] dump_stack+0x15/0x1b [ 101.233804][ T6186] should_fail_ex+0x262/0x280 [ 101.233885][ T6186] should_fail+0xb/0x20 [ 101.233922][ T6186] get_futex_key+0x12d/0xb10 [ 101.233967][ T6186] futex_wake+0x89/0x400 [ 101.234022][ T6186] do_futex+0x3f8/0x460 [ 101.234062][ T6186] ? kmem_cache_free+0x106/0x3b0 [ 101.234084][ T6186] __se_sys_futex+0x2f6/0x370 [ 101.234171][ T6186] __x64_sys_futex+0x78/0x90 [ 101.234222][ T6186] x64_sys_call+0x22e2/0x2550 [ 101.234250][ T6186] do_syscall_64+0x112/0x360 [ 101.234287][ T6186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.234326][ T6186] RIP: 0033:0x7f0f9f21e1d9 [ 101.234345][ T6186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.234485][ T6186] RSP: 002b:00007f0f9dc770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.234514][ T6186] RAX: ffffffffffffffda RBX: 00007f0f9f4a5fa8 RCX: 00007f0f9f21e1d9 [ 101.234535][ T6186] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0f9f4a5fac [ 101.234629][ T6186] RBP: 00007f0f9f4a5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 101.234645][ T6186] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 101.234658][ T6186] R13: 00007f0f9f4a6038 R14: 00007ffe35956950 R15: 00007ffe35956a38 [ 101.234680][ T6186] [ 101.289025][ T6197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61464 sclass=netlink_route_socket pid=6197 comm=syz.4.707 [ 101.308253][ T6195] IPVS: using max 2304 ests per chain, 115200 per kthread [ 101.399937][ T6024] veth0_vlan: entered promiscuous mode [ 101.545742][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.552268][ T6024] veth1_vlan: entered promiscuous mode [ 101.589963][ T6210] loop0: detected capacity change from 0 to 512 [ 101.590371][ T6024] veth0_macvtap: entered promiscuous mode [ 101.593495][ T6210] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.593585][ T6210] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.604744][ T6210] EXT4-fs (loop0): 1 orphan inode deleted [ 101.607306][ T6024] veth1_macvtap: entered promiscuous mode [ 101.646729][ T6024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.669211][ T6024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.702378][ T70] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.702470][ T70] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.702628][ T70] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.702671][ T70] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.800447][ T29] audit: type=1400 audit(1791778477.298:6900): avc: denied { mounton } for pid=6024 comm="syz-executor" path="/root/syzkaller.0wvH8v/syz-tmp" dev="sda1" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 101.804971][ T29] audit: type=1400 audit(1791778477.298:6901): avc: denied { mounton } for pid=6024 comm="syz-executor" path="/root/syzkaller.0wvH8v/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 101.806684][ T29] audit: type=1400 audit(1791778477.298:6902): avc: denied { mounton } for pid=6024 comm="syz-executor" path="/root/syzkaller.0wvH8v/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=15838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 101.887943][ T29] audit: type=1400 audit(1791778477.358:6903): avc: denied { mounton } for pid=6024 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 101.888158][ T29] audit: type=1400 audit(1791778477.358:6904): avc: denied { mount } for pid=6024 comm="syz-executor" name="/" dev="gadgetfs" ino=5246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 101.918395][ T6217] loop5: detected capacity change from 0 to 512 [ 101.974524][ T29] audit: type=1400 audit(1791778477.468:6905): avc: denied { bind } for pid=6226 comm="syz.4.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 102.034625][ T6231] FAULT_INJECTION: forcing a failure. [ 102.034625][ T6231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.034666][ T6231] CPU: 0 UID: 0 PID: 6231 Comm: syz.6.683 Not tainted syzkaller #0 PREEMPT(lazy) [ 102.034700][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.034718][ T6231] Call Trace: [ 102.034727][ T6231] [ 102.034848][ T6231] __dump_stack+0x1d/0x30 [ 102.034882][ T6231] dump_stack_lvl+0x95/0xd0 [ 102.034914][ T6231] dump_stack+0x15/0x1b [ 102.034943][ T6231] should_fail_ex+0x262/0x280 [ 102.034981][ T6231] should_fail+0xb/0x20 [ 102.035037][ T6231] should_fail_usercopy+0x1a/0x20 [ 102.035077][ T6231] _copy_from_user+0x1c/0xb0 [ 102.035186][ T6231] ___sys_sendmsg+0xc1/0x1e0 [ 102.035317][ T6231] __x64_sys_sendmsg+0xd4/0x160 [ 102.035357][ T6231] x64_sys_call+0x22ab/0x2550 [ 102.035381][ T6231] do_syscall_64+0x112/0x360 [ 102.035406][ T6231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.035489][ T6231] RIP: 0033:0x7f519a68e1d9 [ 102.035504][ T6231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.035599][ T6231] RSP: 002b:00007f51990e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.035660][ T6231] RAX: ffffffffffffffda RBX: 00007f519a915fa0 RCX: 00007f519a68e1d9 [ 102.035682][ T6231] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 102.035694][ T6231] RBP: 00007f51990e7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.035777][ T6231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.035789][ T6231] R13: 00007f519a916038 R14: 00007f519a915fa0 R15: 00007ffec3e9df68 [ 102.035844][ T6231] [ 102.356179][ T6258] ================================================================== [ 102.356234][ T6258] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 102.356297][ T6258] [ 102.356307][ T6258] write to 0xffff8881048e5c00 of 8 bytes by task 6245 on cpu 0: [ 102.356333][ T6258] mas_wr_store_entry+0x3c1f/0x5ac0 [ 102.356373][ T6258] mas_store_prealloc+0x421/0x670 [ 102.356401][ T6258] vma_complete+0x3b7/0x830 [ 102.356427][ T6258] __split_vma+0x675/0x720 [ 102.356459][ T6258] vma_modify+0xbf5/0xd50 [ 102.356496][ T6258] vma_modify_flags+0x1be/0x250 [ 102.356541][ T6258] mprotect_fixup+0x382/0x660 [ 102.356580][ T6258] do_mprotect_pkey+0x69f/0x950 [ 102.356622][ T6258] __x64_sys_mprotect+0x48/0x60 [ 102.356653][ T6258] x64_sys_call+0xd54/0x2550 [ 102.356681][ T6258] do_syscall_64+0x112/0x360 [ 102.356713][ T6258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.356750][ T6258] [ 102.356759][ T6258] read to 0xffff8881048e5c00 of 8 bytes by task 6258 on cpu 1: [ 102.356778][ T6258] mtree_range_walk+0x35a/0x480 [ 102.356811][ T6258] mas_walk+0x1ac/0x340 [ 102.356836][ T6258] lock_vma_under_rcu+0xc9/0x210 [ 102.356875][ T6258] do_user_addr_fault+0x239/0x1060 [ 102.356916][ T6258] exc_page_fault+0x62/0xa0 [ 102.356942][ T6258] asm_exc_page_fault+0x26/0x30 [ 102.356963][ T6258] [ 102.356978][ T6258] value changed: 0xffff88811a67c50e -> 0xffff8881048e5c00 [ 102.356995][ T6258] [ 102.357001][ T6258] Reported by Kernel Concurrency Sanitizer on: [ 102.357017][ T6258] CPU: 1 UID: 0 PID: 6258 Comm: syz.4.723 Not tainted syzkaller #0 PREEMPT(lazy) [ 102.357055][ T6258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.357075][ T6258] ================================================================== [ 102.361370][ T29] audit: type=1400 audit(1791778477.858:6906): avc: denied { getopt } for pid=6245 comm="syz.4.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.372288][ T6252] loop4: detected capacity change from 0 to 512 [ 102.504339][ T6256] loop5: detected capacity change from 0 to 512 [ 102.517809][ T6256] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.517924][ T6256] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.554722][ T6256] EXT4-fs (loop5): 1 orphan inode deleted [ 102.562105][ T6256] EXT4-fs mount: 2 callbacks suppressed [ 102.562169][ T6256] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.635047][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.699690][ T6252] loop4: detected capacity change from 0 to 512 [ 102.707009][ T6252] loop4: detected capacity change from 0 to 512 [ 102.743415][ T6252] loop4: detected capacity change from 0 to 512 [ 102.772860][ T6252] loop4: detected capacity change from 0 to 512 [ 102.810494][ T6252] loop4: detected capacity change from 0 to 512 [ 106.118244][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.710312][ T29] audit: type=1400 audit(1791778486.208:6907): avc: denied { write } for pid=6267 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.750578][ T29] audit: type=1400 audit(1791778486.248:6908): avc: denied { write } for pid=6278 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.019591][ T29] audit: type=1400 audit(1791778487.518:6909): avc: denied { write } for pid=6281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.058736][ T29] audit: type=1400 audit(1791778487.558:6910): avc: denied { write } for pid=6292 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.154968][ T29] audit: type=1400 audit(1791778487.648:6911): avc: denied { write } for pid=6295 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.195506][ T29] audit: type=1400 audit(1791778487.688:6912): avc: denied { write } for pid=6306 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1