last executing test programs: 6.038481978s ago: executing program 4 (id=368): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = getpgid(0x0) prlimit64(r0, 0x7, &(0x7f0000000180)={0x2, 0x1ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r7, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x1}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d80)="ca", 0x1}], 0x1}, 0x20004014) r8 = getpid() sched_setscheduler(r8, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r10, 0x8904, 0x0) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xfffffffffffffff2}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r11 = syz_open_dev$tty1(0xc, 0x4, 0x4) r12 = dup(r11) write$UHID_INPUT(r12, &(0x7f00000010c0)={0x7, {"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", 0x1000}}, 0x1006) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0100001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=r8, @ANYRES32, @ANYBLOB="00000000000000000010000000000000000000000000000009000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000020000000000000100010000000000440105007f000001000000000000000000000000000020003c00000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac141453000000000000000000000000000000003300000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000020010000000000000000000000000000000004d22b"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 6.016282198s ago: executing program 2 (id=369): r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000003b40)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002700)=""/163, 0xa3}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/155, 0x9b}, {&(0x7f0000003b80)=""/4097, 0x1001}, {&(0x7f0000003800)=""/123, 0x7b}], 0x5}, 0x40000100) 5.356242799s ago: executing program 2 (id=370): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000200), &(0x7f00000004c0)=ANY=[@ANYRES64=r0], 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x701, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0xc000) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a2, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x2000014, &(0x7f0000000400)={[{@barrier_val={'barrier', 0x3d, 0x1ff}}]}, 0x0, 0x4c0, &(0x7f0000000f00)="$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") write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000002480)=0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r4, r5, 0x26, 0x0, @void}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r6, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="180000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001240)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010101, @in6=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x10, 0x5c, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffc, 0xa9, 0x3, 0x0, 0xfffffffffffff310, 0xffffffffffffffff, 0x0, 0x1da774c7}, {0x7ff, 0x9ff, 0x2000006, 0x800000004000000}, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x200400c5}, 0x4000800) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getpolicy={0x50, 0x15, 0xa35e0d24b534d643, 0x70bd29, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@rand_addr=0x64010100, 0x4e21, 0x0, 0x4e21, 0x8, 0x2, 0xa0, 0x80, 0x2c}, 0x6e6bba, 0x1}}, 0x50}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) r9 = syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d30, 0x13500}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r9, 0x21, &(0x7f0000000440), 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) 4.658533862s ago: executing program 4 (id=376): socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x6c190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x6, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x85, 0xffffffff, 0x1}) syz_open_procfs(r3, &(0x7f0000000180)='smaps\x00') socket(0x2, 0x80805, 0x0) (async) socket(0x2, 0x80805, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0xa976a000) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94) 4.438445209s ago: executing program 0 (id=380): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2) syslog(0x2, &(0x7f0000000000)=""/4, 0x4) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0x3, 0x0, 0x2, 0x2, 0xffffffff}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[], 0x1, 0x1b1, &(0x7f0000000240)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000100)=0x2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r2) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2240000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r3, 0x4, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x9, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x2800}, 0x4004) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000200)={0x4, 0x0, 0xffffff7d, 0x1}, 0x10) syz_clone(0xc14000, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0x0) 4.298461933s ago: executing program 4 (id=381): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000040)={0x0, 0x0}) r4 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x78) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8880, 0x81) getdents64(r6, &(0x7f0000001700)=""/127, 0x7f) lseek(r6, 0x4, 0x0) getdents64(r6, 0x0, 0xfffffffffffffe49) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000800200fc010000000000000000000000000001ac1414bb00000000000000000000000000000400100000000200201084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/112], 0xb8}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}, 0x1, 0x300}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}, @IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f030000000000002e100200000000002604fdffff02000014010000030301001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc1"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x10}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) 3.78241175s ago: executing program 2 (id=382): truncate(&(0x7f0000000000)='./file0\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x13) 3.76620622s ago: executing program 0 (id=383): socket$inet6_tcp(0xa, 0x1, 0x0) getegid() set_mempolicy(0x3, &(0x7f0000000380)=0x3, 0x9) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nobh}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0xe4d}}]}, 0x0, 0x471, &(0x7f0000000bc0)="$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") syz_read_part_table(0x5be, &(0x7f00000005c0)="$eJzs2z9o02kYB/AnahAUzsXJ4bAOTi6KoxmsJFFRCNEu4qCgiJgpghAhIOjQZmhphtKxSylk6Z+paYYOR0sLnUvp0KPQodPRLoUuzdHre3t7/QMHnw/8ePJ732/eJ8+Q8Q3+1y7FX91uNxMR3asn/3ZfK194drv0uPz68IC3EdHzx2/ThzuZlPj31DvpfSO9j49d6wzsPs221l/t3X230LiU9n+k5/pEu+/Uw3HuJnOLN37+qhYHa7nPa8X6Vv/qysupnXy5/aLRnH6effIh5ZZSvZLq16jF9/gS76MSlfgY1TPqP9ravH9wq9ia/fRov9AZmn+QcqVTznnc/t96ht806733Zm6OPKzNLZe3Lx/lKv/h3wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMWbzC3e+PmrWhys5T6vFetb/asrL6d28uX2i0Zz+nn2yYeUW0r1Sqpfoxbf40u8j0pU4mNUz6j/aGvz/sGtYmv206P9Qmdo/kHKlU4553H7f+sZftOs996buTnysDa3XN6+fJSrXD2nHwAAAAAAAAAAAAAAAAAAAAARkS88u116XH4dkYm3EdH+vfefq/7ddN89k3J30oeNtD4+dq0zsPs021p/tXf33ULjz7T+Iz3XJ9p9Fz8NJ/V3AAAA//99QZbF") 3.383330792s ago: executing program 3 (id=385): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x1d, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0xffff}, {}, {0x2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 3.098766741s ago: executing program 0 (id=386): r0 = msgget(0x1, 0x70) msgctl$IPC_RMID(r0, 0x0) mkdir(&(0x7f0000000480)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r1 = socket(0x2d, 0x2, 0x0) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$can_bcm(r1, 0x0, 0x40002020) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f, 0x0, 0x0, 0x0, 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0xe, 0x0, &(0x7f0000000040)="f9ad5dff258f902792b9ba83bbcc", 0x0, 0x13fd, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000d964ccb6523efe55a0df6c000000000000add500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000043c0)) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001500)={&(0x7f0000000f00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x4c8, 0xb, 0xa, 0x100, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_DESC={0x138, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x114, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbc96}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x30}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6f24891c}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x456}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb11e}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_SET_DESC={0x28c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_CONCAT={0xc4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}]}, @NFTA_SET_DESC_CONCAT={0xf8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x158d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff03}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5e59}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcbf6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}]}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xaf34}, @NFTA_SET_DESC_CONCAT={0x64, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x13dd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff3}]}, {0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x10000}]}, @NFTA_SET_USERDATA={0xef, 0xd, 0x1, 0x0, "dd439a7a246233455b4241d8b6ae1bb8a9db766fd857ba90322ed3f359765a60d49730b214a2f9807b78eb0fc024299ed0a0a984f003332921ab9d7d17306df8b48c6d3b6b2fbd0866a07ef39cde24a1d0b638e0ef61b1f76c7ea90b259bab28ad243e92d6f238cf78736a24e58eb8a0fd29bdbb40676fe1c201a8e88b76cfaf651d61c10444ed4d0ebd07e38515dc6f94e06db434e801065590b46742a6d0b1bdb8966f6238c5457099970a7caab00e959b8e9dc7afa612618a9b16f8faa66f6773498ba158124be56f589602d2d1cc68159e12120b60837e358d6c2e4248000ffc48e3052adc16e42212"}]}, @NFT_MSG_DELSET={0xec, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_USERDATA={0xba, 0xd, 0x1, 0x0, "711485595ccde5a00dc96e12b2e09f41d21cfdb0569d697ac526811e2d5ccc5368acb0c8e3a313c92f3c90332c1bbaa06f0a99b776ef61292af82d9fe1f4ee117d077fde34e1fb078de530bf8d67faa383cc0e00e6fbbbf05e7dedca62e09d281ed0ec3f7dd44e7343ea0acb8e13cb77e9452fb994523d217b94a09626e2b97ed90507c16b1ee8889b6717b9df81fc7ebc65c91b0f204948ce6d9825990ea9cda111b6376c1478b90da734156bab2b823ced1ee63463"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5dc}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1185412, 0x0, 0x1, 0x0, &(0x7f0000000140)) 2.920866207s ago: executing program 1 (id=387): r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000003b40)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002700)=""/163, 0xa3}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/155, 0x9b}, {&(0x7f0000003b80)=""/4097, 0x1001}, {&(0x7f0000003800)=""/123, 0x7b}], 0x5}, 0x40000100) (fail_nth: 3) 2.920191277s ago: executing program 3 (id=388): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f00000000c0)) r3 = getpid() r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket(0x2b, 0x1, 0x1) bind$inet6(r4, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x6) r5 = syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x16, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="660a000000000000611190ff00000000850000008b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) kcmp(r5, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x32, @local, 0x4e20, 0xfffffffd, 'lblc\x00', 0x30, 0x660f53fe, 0x6f}, 0x2c) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.5143878s ago: executing program 1 (id=389): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)=@secondary) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4319030000ecffff130012800b0001006d616373656300000400028008000500", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) preadv2(r0, &(0x7f0000002180)=[{&(0x7f0000000600)=""/206, 0xce}, {&(0x7f0000000700)=""/51, 0x33}, {&(0x7f0000000740)=""/227, 0xe3}, {&(0x7f0000000840)}, {&(0x7f0000000880)=""/44, 0x2c}, {&(0x7f00000008c0)=""/165, 0xa5}, {0x0}, {&(0x7f0000001140)=""/4096, 0x1000}], 0x8, 0xc, 0x0, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f00000002c0)=0xa, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = socket$inet(0x2, 0x80001, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x1d442, 0x10028}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x810) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbb690d2283d785ef3d2b99d9bbbbbbbb000000727a4618d27ea8f9dd68e4177f0028890000000000000000000000000000000001ff020000000000000000000000000001bd4fb9e9cbae6d1c21edd9ff38ebd97386806c27d875482109e2185d6f15c9ee51b342066e552bce852304ecf93b5046d195016dac61d4065382e7bf943a96a1dce93e0200000000000000457dc142936853"], 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r4) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000000b00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xc8, r9, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x31}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2000004}, 0x40) listen(r5, 0x3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x200000, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESHEX=r5]) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000440)={'nat\x00', 0x0, 0x4, 0xa6, [0x7, 0x6, 0x7, 0x1, 0xa, 0x1], 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f0000000140)=""/166}, &(0x7f00000004c0)=0x78) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@canfd={0xd, {{0x1, 0x1, 0x1, 0x1}, 0x16, 0x1, 0x0, 0x0, "3bd2127ba4cabd1b8915f3fcdd8d13140061ec553dffa157ad8d70693ff87027ef3613a91e5268dc8a9de6e5338891933057ba6f4481cc15be62664738ddbff6"}}}}, &(0x7f0000000200)={0x1, 0x3, [0x665, 0xae5, 0xab, 0x20c]}) r10 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x500, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0xa, 0x7}, 0xc694, 0x2000000, 0x5, 0x9, 0x0, 0x10, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) flistxattr(r10, 0x0, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000340)) 2.51317374s ago: executing program 2 (id=390): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x2ffc, 0x6000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x200408c4) 2.479014911s ago: executing program 2 (id=391): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/17, 0x11}, 0x40}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x23}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x3, 0x9]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x8, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r6, 0xe27, 0x70bd28, 0x80000, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 2.274763018s ago: executing program 3 (id=392): ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e23, @broadcast}}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8001) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20048010) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r4, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xc000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x800}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$SOCK_DESTROY(r2, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x238, 0x15, 0x400, 0x70bd28, 0x25dfdbfd, {0x2a, 0x6}, [@INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "f725615911ffd5f29cfbe9aa6cd56621c392bf047c76672bb8971fa8c52d75ad8b07f5cda2ca893855dc2864d342067a6292aef81f315838a2eacdc4350752b4d115a5ae1dc6f8fe64b8941533b68e1aa8fad50bdb866163771c331624878f447d315058edd6be45f7ecf3683fbefbe79dfdf26126bb615d703e7ff2dc9f9de4b9377ba8233658b12787c51a0a7d2596eb53c87dfa8c98fdb95cf5afa19081a3494035a7072ed789f2eb89c176a4d2772ed2a03acaf78ed045f6f2b39a48ca90e7625f5344b8fdec7553ea6dba41bd2170df57eca9d78a165ea8708b96b4a2aa4bdb78877323c53dfd8a96220f1b"}, @INET_DIAG_REQ_BYTECODE={0x73, 0x1, "f88f383105b2fbff794e43b50e8304bfe4e16fcd9b1551dd8ecdd1fb15d221551455443189a17682e5facc2750da414d3545d986d771cee8989ed2d70dfb8ac7e2dd9fe145ba198d67a529e57b7047e70e66cd7c92ffcf5b14c144f46df8535ee5632e9d02ad07fad06ac1f2676507"}, @INET_DIAG_REQ_BYTECODE={0xbc, 0x1, "8a64d24c84f4784e26ea2b0f8424a7c2a570ec747f7b938e8545e19d404def8aae046aca855632b22df50d88a787b5723ef8a1222a8d95b6d31167f4ab49e73bd3120a6e0da64b43b092d607553fc26c78ecb8ec4c7fde7544c2e22608defc0609b5a66b7151d83b918fcdef2a128174746a42d1e8c5baf06d0ccd288699d335dd4b12eba258af119026a28ec09ebb485858083f2a7111a7d9bc9f554d9f510a31f9371fc53f157ddc41b0bf0c6ba57b2728d9f9eddb19c2"}]}, 0x238}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) sendmsg$SOCK_DESTROY(r2, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x238, 0x15, 0x400, 0x70bd28, 0x25dfdbfd, {0x2a, 0x6}, [@INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "f725615911ffd5f29cfbe9aa6cd56621c392bf047c76672bb8971fa8c52d75ad8b07f5cda2ca893855dc2864d342067a6292aef81f315838a2eacdc4350752b4d115a5ae1dc6f8fe64b8941533b68e1aa8fad50bdb866163771c331624878f447d315058edd6be45f7ecf3683fbefbe79dfdf26126bb615d703e7ff2dc9f9de4b9377ba8233658b12787c51a0a7d2596eb53c87dfa8c98fdb95cf5afa19081a3494035a7072ed789f2eb89c176a4d2772ed2a03acaf78ed045f6f2b39a48ca90e7625f5344b8fdec7553ea6dba41bd2170df57eca9d78a165ea8708b96b4a2aa4bdb78877323c53dfd8a96220f1b"}, @INET_DIAG_REQ_BYTECODE={0x73, 0x1, "f88f383105b2fbff794e43b50e8304bfe4e16fcd9b1551dd8ecdd1fb15d221551455443189a17682e5facc2750da414d3545d986d771cee8989ed2d70dfb8ac7e2dd9fe145ba198d67a529e57b7047e70e66cd7c92ffcf5b14c144f46df8535ee5632e9d02ad07fad06ac1f2676507"}, @INET_DIAG_REQ_BYTECODE={0xbc, 0x1, "8a64d24c84f4784e26ea2b0f8424a7c2a570ec747f7b938e8545e19d404def8aae046aca855632b22df50d88a787b5723ef8a1222a8d95b6d31167f4ab49e73bd3120a6e0da64b43b092d607553fc26c78ecb8ec4c7fde7544c2e22608defc0609b5a66b7151d83b918fcdef2a128174746a42d1e8c5baf06d0ccd288699d335dd4b12eba258af119026a28ec09ebb485858083f2a7111a7d9bc9f554d9f510a31f9371fc53f157ddc41b0bf0c6ba57b2728d9f9eddb19c2"}]}, 0x238}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000007c0)={'\x00', 0x4429, 0xfffffffa, 0x1a8, 0xd41, 0x100, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0xf}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000800) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000980)={0x0, 0x1c, &(0x7f0000000940)=[@in6={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00', 0xfff}]}, &(0x7f00000009c0)=0x10) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000980)={0x0, 0x1c, &(0x7f0000000940)=[@in6={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00', 0xfff}]}, &(0x7f00000009c0)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000a00)={r9, 0x8}, &(0x7f0000000a40)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000a80)={r9, 0xff}, &(0x7f0000000ac0)=0xc) socket$can_raw(0x1d, 0x3, 0x1) (async) r10 = socket$can_raw(0x1d, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r11, &(0x7f0000000b00)={0x2, 0x4e24, @loopback}, 0x10) ioctl$sock_inet_SIOCGIFPFLAGS(r10, 0x8935, &(0x7f0000000b40)={'geneve0\x00'}) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x9c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x89}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xb}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x8c}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20040800}, 0x2008001) (async) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x9c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x89}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xb}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x8c}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20040800}, 0x2008001) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000e00), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={r2, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb1, &(0x7f0000000f00)=[{}], 0x8, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0xef, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000011c0)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008884}, 0x0) (async) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008884}, 0x0) 2.19615836s ago: executing program 3 (id=393): socket(0x10, 0x3, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) fsmount(0xffffffffffffffff, 0x0, 0x4) 2.119800212s ago: executing program 1 (id=394): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000240)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\xe7\x1e\xd0k\x82\xe1Y\xcb\x1a7\x0f\'\xf9r\x97\xac\xfd\xa0\xbf\xb0\a\xe1\\\x03*\x973\x11\xd9A\xaf\xf0Y,\x15\xfaw\xbc\xfc\xe7\xe4\xb6\x02\xf2\x89\x89\xd2\x96\x8f\xb3\x90\xf9d\xc7\xef?\x06\x00\x00\x00\x00\x00\x00\x00', 0x3a, '', 0x3a, './file2', 0x3a, [0x50, 0xc]}, 0x6a) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mkdir(&(0x7f0000000040)='./cgroup/../file0/file0\x00', 0x4) syz_usb_connect(0x2, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b"], 0x0) mkdir(0x0, 0x48) set_mempolicy(0x3, &(0x7f0000000000)=0x10, 0xf) io_setup(0x66, &(0x7f0000000400)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x1, 0x13) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x8000, 0x80, 0x97be, 0x6, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @local}}}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008000640000000002c66d8b0bf9a3feb815c25fcbc3d1b92cc91951962e4f1aed938907700d057f47d8a282de035e20acd1eedc096e2472cf07517811577bda359a96b0f4c9e0dbc66925401c1481c0c2574f95ec1f60e9315f3ccc10dfa9e229fdb3fab63ea2894e7340001fee620dcf75fef453b5e90265cffd3a7927cb0fa8363ff4e9386756c8078a7af14d3ddb0439aa9dc8d086cf075dec4eea7b2e27d17dd544fb83e5fecc3e801f87306e4a37c4a16cc9329f3adff9381359a233b2e4af33d22246a42b523f37daeca75b96f2e"], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000200)=0x4) r7 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) rmdir(&(0x7f0000000180)='./cgroup/../file0\x00') listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x142c, 0x0, 0xffff7fff, 0xd}, &(0x7f0000000380)=0x98) socket$kcm(0x2d, 0x2, 0x0) accept4$unix(r1, 0x0, 0x0, 0x800) 2.118068002s ago: executing program 4 (id=395): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18ffffffffffffffe40000000000000018110004", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0xfffffffe, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="02011400"], 0xdd12}, {0x0, 0x2300}], 0x2}, 0x200408d0) 2.095790733s ago: executing program 0 (id=396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x80000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000b00)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@nouser_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x485, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x5, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000400)={'lo\x00', 0x2b4b}) perf_event_open(&(0x7f0000000e40)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f00000001c0), 0x2}, 0x102802, 0x31, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x28203) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400", @ANYRES16=r6, @ANYBLOB="210329bd70250100000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2.038514215s ago: executing program 4 (id=397): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000003c0), 0x1, 0x5a3, &(0x7f0000001040)="$eJzs3U9oHFUYAPBvZrNN/0RTQUGlh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3btIkW7O/H0z2vZnZ+d6b2e9lZ5hhA+hZh+t/0ojnIuJ8EjG4ZllfZAsPN9ZbXloo3l1aKCZRq134I4kkIu4sLRSb6yfZ64GIWIyIZyPih3zE0XR1k3uaherc/MRouVyazupDM5O5rDg6XhovTZ149bVTp0+eGjk+sra5d2tra/mN9fXar9c/vPbTGzevf/nVocXix6NJnImBbNnafmylxj7Jx5l1809uR7AuSrrdADYll+V5PZWeicHIZVnfSm3t4NC/I80DtlGtP6K2ak0R6AGJpIce1fweUD//bU47+f3j1tnGCUg97vLSQvGDaMbva1ybiL0r5yb7/0zuOzOpn28e3MmGsistXo2I4b6+Bz//Sfb527zhrWgg2+r7s40D9eDxT1fHn2gx/gw0r50+oub4t5yNf8st4ufajH/nO4zx99u/fdY2/tX+eL5l/GQ1ftIifhoR73YY/8Zb355ut6z2ecSRaB2/KWlcH748VJ2bP3Zpcv314aGLl8ql4cbfljG+O3Lo9fb9j9jfJn7jmu3elYas7f+erE1ph/3/5sevX1h8SPyXX3z48W+1//dFxEcdxn/qzhdvtlt262pyu/4tYKPHP4l83Oww/itnDv+SFV01BAAAAAAAAACALZSu3MuWpIXVcpoWCo1neJ+O/Wm5Up05erEyOzXWuOftYOTT5p1Wg416Uq+PZPfjNuvH19VPNJ/uze1bqReKlfJYl/sOAAAAAAAAAAAAAAAAAAAAj4sD657//yu38vz/+p+rBnar9j/5Dex28h961/35n3StHcDO8/8felZN/kPvkv/Qu+Q/9C75D71L/kPvkv/Qu+Q/AAAAAAAAAAAAAAAAAAAAAAAAAABsi/PnztWn2t2lhWK9PtY3NztRee/YWKk6UZicLRaKlenLhfFKZbxcKhQrk/+1vaRSuTwcU7NXhmZK1Zmh6tz8O5OV2anmb4qW8tveIwAAAAAAAAAAAAAAAAAAAPj/GViZkrQQkW/U07RQiHgiIg4mkVy8VC4NR8STEfFzLt9fr490u9EAAAAAAAAAAAAAAAAAAACwy1Tn5idGy+XSdMtC0n5R54W+LNSjbmdLCn0bWTkiFre2GfUtbvhd+WwHdnnX7Y5C7vH4HD7+hS4OSgAAAAAAAAAAAAAAAAAA0KPuPfTb6Tv+2d4GAQAAAAAAAAAAAAAAAAAAQE9Kf08ioj4dGXxpYP3SPclybuU1It6/ceGTK6MzM9Mj9fm3V+fPfJrNP96N9gOdauZpGhH1PAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADuqc7NT4yWy6XpTRb6O1in230EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Ix/AwAA//9q8Mri") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x80) write$cgroup_int(r1, &(0x7f0000000280)=0x1ae, 0xfffffe72) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f0000000080)=[0x8, 0x6]) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000302, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newsa={0x1a8, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2, 0x0, 0x0, 0xfffe, 0x1000, 0x0, 0x0, 0x0, 0x2f}, {@in=@multicast1, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x1000000000, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x0, 0x20000000}, 0x0, 0x0, 0x2}, [@algo_crypt={0x6a, 0x2, {{'cbc(aes)\x00'}, 0x110, "5540907f362dd81951638432adc2b330862592aac15cef2adcba13b2ac41daa07200"}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20008800}, 0x20004000) pwrite64(r2, 0x0, 0x0, 0x9000) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.491834512s ago: executing program 2 (id=398): r0 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa300"], 0x0}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) poll(&(0x7f0000000080)=[{r4, 0x400}, {r4, 0x12}], 0x2, 0x73) signalfd4(r4, &(0x7f0000000000), 0x8, 0x800) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4000056) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 1.282765619s ago: executing program 3 (id=399): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x1d, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0xffff}, {}, {0x2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1.136784024s ago: executing program 1 (id=400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00003f9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x3893, &(0x7f0000000040)={0x0, 0x1000c89b, 0xc000, 0x800007, 0x41}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400030000000900020073797a32000000000500010007000000070005000a000000140007800800114000000000080012400000ffff15000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4', @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async, rerun: 64) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@nombcache}, {@bsdgroups}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000001060102000000293500000000000000000205000100070000000500ebff060000000500010007784f2700010007000000050001000700000005000100070000000500018d0700"/86], 0x54}, 0x1, 0x0, 0x0, 0x8c4}, 0x40984) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0xd0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1c8, 0x20a, 0x278, 0x1c8, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0x0, 0xff000000], 'batadv_slave_1\x00', 'dvmrp0\x00', {0xff}, {}, 0x2c, 0x21, 0x0, 0x1}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) (async) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)={0x19, 0x5, 0xf, 0x6, 0xfffffff0, 0xd}) (async) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x44884) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400edff2bbd70000200000007000000", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="000202007f00000100000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) (async, rerun: 32) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32) r8 = open(&(0x7f0000000300)='./file1\x00', 0x557002, 0x0) io_uring_enter(r8, 0x1fd6, 0xb872, 0x41, 0x0, 0x0) (async) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1.100468085s ago: executing program 0 (id=401): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x2ffc, 0x6000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x200408c4) 1.055802486s ago: executing program 0 (id=402): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@nojournal_checksum}, {@grpquota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@i_version}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000280), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xfd, 0x20, 0x0, 0x0, 0x0, 0x4, 0x60080, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc, 0x1, @perf_config_ext={0x7, 0x7}, 0x14100, 0x400, 0x0, 0x1, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x20, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) getpgrp(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) perf_event_open(0x0, 0x0, 0xfff0000000000000, 0xffffffffffffffff, 0x0) ptrace$setregs(0xd, r2, 0x5, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b4f723dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e3724828ef31b353e71805205c3dceb44c") ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={0x0}) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x2) ptrace$cont(0x1f, r1, 0x0, 0x80) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x428, 0x200, 0x200, 0x0, 0x98, 0x0, 0x390, 0x390, 0x390, 0x390, 0x390, 0x6, 0x0, {[{{@ip={@empty, @multicast2, 0xff, 0x0, 'veth0_virt_wifi\x00', 'syzkaller1\x00', {}, {0xff}, 0x6, 0x2, 0x40}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0xff, 'lo\x00', 'nicvf0\x00', {}, {}, 0x8}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@ah={{0x30}, {[0x3ff, 0x2]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @empty, 0x0, 0xffffffff, 'syzkaller0\x00', 'wg0\x00', {}, {}, 0x89, 0x0, 0x75}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x0, 0x4, 0x2, 0x1, 0x6, 0x5], 0x5}, {0xffffffffffffffff, [0x1, 0x3, 0x6, 0x4, 0x6, 0x3], 0x1, 0x2}}}}, {{@ip={@empty, @empty, 0xffffffff, 0x0, 'vlan1\x00', 'batadv_slave_1\x00', {}, {}, 0x4, 0x0, 0x18}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) socket(0x35, 0xa, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x7fffffff, @empty, 0xa098}, {0xa, 0x4e20, 0x9, @mcast1, 0x9}, r4, 0x8001}}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000000)=ANY=[], 0x835, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 909.430811ms ago: executing program 4 (id=403): listen(0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540), 0x3, 0x480, &(0x7f0000000a40)="$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") r5 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) finit_module(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 907.778161ms ago: executing program 3 (id=404): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)=@secondary) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4319030000ecffff130012800b0001006d616373656300000400028008000500", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) preadv2(r0, &(0x7f0000002180)=[{&(0x7f0000000600)=""/206, 0xce}, {&(0x7f0000000700)=""/51, 0x33}, {&(0x7f0000000740)=""/227, 0xe3}, {&(0x7f0000000840)}, {&(0x7f0000000880)=""/44, 0x2c}, {&(0x7f00000008c0)=""/165, 0xa5}, {0x0}, {&(0x7f0000001140)=""/4096, 0x1000}], 0x8, 0xc, 0x0, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f00000002c0)=0xa, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = socket$inet(0x2, 0x80001, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x1d442, 0x10028}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x810) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbb690d2283d785ef3d2b99d9bbbbbbbb000000727a4618d27ea8f9dd68e4177f0028890000000000000000000000000000000001ff020000000000000000000000000001bd4fb9e9cbae6d1c21edd9ff38ebd97386806c27d875482109e2185d6f15c9ee51b342066e552bce852304ecf93b5046d195016dac61d4065382e7bf943a96a1dce93e0200000000000000457dc142936853"], 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r4) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000000b00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xc8, r9, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x31}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2000004}, 0x40) listen(r5, 0x3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x200000, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESHEX=r5]) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000440)={'nat\x00', 0x0, 0x4, 0xa6, [0x7, 0x6, 0x7, 0x1, 0xa, 0x1], 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f0000000140)=""/166}, &(0x7f00000004c0)=0x78) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@canfd={0xd, {{0x1, 0x1, 0x1, 0x1}, 0x16, 0x1, 0x0, 0x0, "3bd2127ba4cabd1b8915f3fcdd8d13140061ec553dffa157ad8d70693ff87027ef3613a91e5268dc8a9de6e5338891933057ba6f4481cc15be62664738ddbff6"}}}}, &(0x7f0000000200)={0x1, 0x3, [0x665, 0xae5, 0xab, 0x20c]}) r10 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x500, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0xa, 0x7}, 0xc694, 0x2000000, 0x5, 0x9, 0x0, 0x10, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) flistxattr(r10, 0x0, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000340)) 907.146861ms ago: executing program 1 (id=405): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000040)={0x0, 0x0}) r4 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x78) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8880, 0x81) getdents64(r6, &(0x7f0000001700)=""/127, 0x7f) lseek(r6, 0x4, 0x0) getdents64(r6, 0x0, 0xfffffffffffffe49) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000800200fc010000000000000000000000000001ac1414bb00000000000000000000000000000400100000000200201084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/112], 0xb8}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}, 0x1, 0x300}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}, @IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x10}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) 0s ago: executing program 1 (id=406): socket(0x5, 0x80805, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) close(0x3) (async) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) (async, rerun: 32) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async, rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r5}, 0x8) (async) getsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x2) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f00000000c0)={r6, r7+10000000}, &(0x7f0000000100)) (async) socket$inet_mptcp(0x2, 0x1, 0x106) kernel console output (not intermixed with test programs): -fs (loop0): 1 truncate cleaned up [ 39.964144][ T3563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.009843][ T3565] loop2: lost filesystem error report for type 5 error -117 [ 40.010052][ T3565] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.16: Invalid block bitmap block 0 in block_group 0 [ 40.057622][ T3565] loop2: lost filesystem error report for type 5 error -117 [ 40.057910][ T3565] EXT4-fs error (device loop2): ext4_acquire_dquot:7032: comm syz.2.16: Failed to acquire dquot type 1 [ 40.081116][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.088973][ T3565] loop2: lost filesystem error report for type 5 error -28 [ 40.109601][ T3570] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 40.125279][ T3565] EXT4-fs (loop2): 1 orphan inode deleted [ 40.134068][ T107] EXT4-fs error (device loop2): ext4_release_dquot:7068: comm kworker/u8:5: Failed to release dquot type 1 [ 40.152237][ T107] loop2: lost filesystem error report for type 5 error -117 [ 40.159226][ T3565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.211450][ T3578] netlink: 10 bytes leftover after parsing attributes in process `syz.3.17'. [ 40.339553][ T3586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 40.363895][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.398806][ T3565] syz.2.16 (3565) used greatest stack depth: 9728 bytes left [ 40.434452][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.520236][ T3596] random: crng reseeded on system resumption [ 40.580821][ T3602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 40.593032][ T3602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'. [ 40.666181][ T3602] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.673460][ T3602] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.720180][ T3605] Illegal XDP return value 4294967274 on prog (id 6) dev N/A, expect packet loss! [ 40.828522][ T3602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.839491][ T3602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.004213][ T68] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.054815][ T68] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.140018][ T68] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.191562][ T3605] loop4: detected capacity change from 0 to 128 [ 41.204650][ T68] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.223413][ T3605] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.241727][ T3612] geneve2: entered allmulticast mode [ 41.255764][ T3605] ext4 filesystem being mounted at /7/bus/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.273416][ T28] kauditd_printk_skb: 119 callbacks suppressed [ 41.273464][ T28] audit: type=1400 audit(1781629860.890:271): avc: denied { write } for pid=3599 comm="syz.4.25" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.301569][ T28] audit: type=1400 audit(1781629860.890:272): avc: denied { create } for pid=3599 comm="syz.4.25" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.385371][ T28] audit: type=1400 audit(1781629861.000:273): avc: denied { write } for pid=3599 comm="syz.4.25" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.456635][ T3621] tipc: Started in network mode [ 41.461929][ T3621] tipc: Node identity ac1414aa, cluster identity 4711 [ 41.469284][ T3621] tipc: Enabled bearer , priority 10 [ 41.562975][ T3625] loop0: detected capacity change from 0 to 128 [ 41.570734][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.621868][ T28] audit: type=1400 audit(1781629861.190:274): avc: denied { mount } for pid=3624 comm="syz.0.32" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 41.644569][ T3631] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 41.655980][ T3631] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 41.658951][ T3625] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 41.674025][ T3625] FAT-fs (loop0): Filesystem has been set read-only [ 41.712023][ T3616] set_capacity_and_notify: 1 callbacks suppressed [ 41.712046][ T3616] loop2: detected capacity change from 0 to 512 [ 41.740295][ T3625] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 41.756276][ T3625] bond1 (unregistering): Released all slaves [ 41.765743][ T28] audit: type=1400 audit(1781629861.370:275): avc: denied { write } for pid=3632 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 41.797763][ T3616] EXT4-fs: Ignoring removed i_version option [ 41.839043][ T3644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34'. [ 41.849688][ T3644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.34'. [ 41.890109][ T3644] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.897390][ T3644] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.960555][ T3644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.972788][ T3644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.048649][ T30] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.060228][ T30] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.071861][ T30] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.081035][ T30] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.090513][ T3631] EXT4-fs (loop3): failed to open journal device unknown-block(0,3) -6 [ 42.277311][ T28] audit: type=1400 audit(1781629861.890:276): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 42.325070][ T3616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.388040][ T3616] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.470904][ T3653] gretap0 speed is unknown, defaulting to 1000 [ 42.477308][ T23] tipc: Node number set to 2886997162 [ 42.488752][ T3653] gretap0 speed is unknown, defaulting to 1000 [ 42.507487][ T3653] gretap0 speed is unknown, defaulting to 1000 [ 42.514763][ T28] audit: type=1400 audit(1781629862.050:277): avc: denied { write } for pid=3615 comm="syz.2.28" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.540268][ T3653] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 42.548611][ T3653] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 42.561485][ T28] audit: type=1400 audit(1781629862.080:278): avc: denied { setopt } for pid=3651 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.598235][ T3653] gretap0 speed is unknown, defaulting to 1000 [ 42.604599][ T28] audit: type=1400 audit(1781629862.100:279): avc: denied { remount } for pid=3615 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.629111][ T3653] gretap0 speed is unknown, defaulting to 1000 [ 42.663002][ T3653] gretap0 speed is unknown, defaulting to 1000 [ 42.666730][ T28] audit: type=1400 audit(1781629862.280:280): avc: denied { read write } for pid=3657 comm="syz.4.41" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 42.670509][ T3616] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 42.722608][ T3653] gretap0 speed is unknown, defaulting to 1000 [ 42.741998][ T3653] gretap0 speed is unknown, defaulting to 1000 [ 42.771312][ T3656] loop1: detected capacity change from 0 to 8192 [ 42.772097][ T3654] loop3: detected capacity change from 0 to 256 [ 43.035308][ T3669] random: crng reseeded on system resumption [ 43.037683][ T3616] netlink: 36 bytes leftover after parsing attributes in process `syz.2.28'. [ 43.067225][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.100054][ T3672] loop2: detected capacity change from 0 to 512 [ 43.162714][ T3670] loop1: detected capacity change from 0 to 128 [ 43.186642][ T3678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.195403][ T3678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.207473][ T3670] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.210330][ T3678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.228223][ T3678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.237874][ T3670] ext4 filesystem being mounted at /11/bus/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.240101][ T3678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.266890][ T3678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.279926][ T3678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.292000][ T3678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.430230][ T3685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'. [ 43.441876][ T3685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.50'. [ 43.537166][ T3685] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.544492][ T3685] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.609106][ T3685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.620496][ T3685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.766149][ T23] gretap0 speed is unknown, defaulting to 1000 [ 43.773969][ T1732] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.784412][ T23] syz0: Port: 1 Link DOWN [ 43.801331][ T1732] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.878798][ T1732] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.923672][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.948718][ T3688] loop4: detected capacity change from 0 to 256 [ 43.958902][ T1732] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.051648][ T3688] syz.4.51 uses obsolete (PF_INET,SOCK_PACKET) [ 44.274387][ T3699] loop3: detected capacity change from 0 to 164 [ 44.288396][ T3699] ISOFS: unable to read i-node block [ 44.296718][ T3699] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 44.336510][ T3702] loop1: detected capacity change from 0 to 512 [ 44.358200][ T3704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.56'. [ 44.365175][ T3702] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 44.388227][ T3702] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 44.416036][ T3702] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -6 [ 45.445456][ T3741] loop3: detected capacity change from 0 to 128 [ 45.497555][ T3741] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.511464][ T3745] tipc: Started in network mode [ 45.516525][ T3741] ext4 filesystem being mounted at /10/bus/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.527590][ T3745] tipc: Node identity ac1414aa, cluster identity 4711 [ 45.534739][ T3745] tipc: Enabled bearer , priority 10 [ 45.650511][ T3753] FAULT_INJECTION: forcing a failure. [ 45.650511][ T3753] name failslab, interval 1, probability 0, space 0, times 0 [ 45.670639][ T3753] CPU: 0 UID: 0 PID: 3753 Comm: syz.4.70 Not tainted syzkaller #0 PREEMPT(lazy) [ 45.670674][ T3753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 45.670695][ T3753] Call Trace: [ 45.670708][ T3753] [ 45.670720][ T3753] __dump_stack+0x1d/0x30 [ 45.670751][ T3753] dump_stack_lvl+0x95/0xd0 [ 45.670785][ T3753] dump_stack+0x15/0x1b [ 45.670810][ T3753] should_fail_ex+0x25e/0x270 [ 45.670874][ T3753] ? fl_change+0xff/0x1c30 [ 45.670909][ T3753] should_failslab+0x8c/0xb0 [ 45.670936][ T3753] __kmalloc_cache_noprof+0x5f/0x400 [ 45.670967][ T3753] fl_change+0xff/0x1c30 [ 45.671000][ T3753] ? mutex_unlock+0x4e/0x90 [ 45.671035][ T3753] ? radix_tree_lookup+0x12d/0x140 [ 45.671077][ T3753] ? __rcu_read_unlock+0x4e/0x70 [ 45.671176][ T3753] tc_new_tfilter+0xf74/0x1170 [ 45.671203][ T3753] ? __rcu_read_unlock+0x4e/0x70 [ 45.671252][ T3753] ? __pfx_tc_new_tfilter+0x10/0x10 [ 45.671358][ T3753] rtnetlink_rcv_msg+0x64b/0x720 [ 45.671394][ T3753] netlink_rcv_skb+0x11e/0x220 [ 45.671421][ T3753] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 45.671473][ T3753] rtnetlink_rcv+0x1c/0x30 [ 45.671563][ T3753] netlink_unicast+0x5a7/0x680 [ 45.671610][ T3753] netlink_sendmsg+0x5be/0x6f0 [ 45.671684][ T3753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.671714][ T3753] ____sys_sendmsg+0x532/0x580 [ 45.671755][ T3753] ___sys_sendmsg+0x195/0x1e0 [ 45.671803][ T3753] __x64_sys_sendmsg+0xd4/0x160 [ 45.671878][ T3753] x64_sys_call+0x194c/0x3020 [ 45.671959][ T3753] do_syscall_64+0x136/0x3c0 [ 45.671990][ T3753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.672016][ T3753] RIP: 0033:0x7f5821fcce59 [ 45.672044][ T3753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.672066][ T3753] RSP: 002b:00007f5820a1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.672090][ T3753] RAX: ffffffffffffffda RBX: 00007f5822245fa0 RCX: 00007f5821fcce59 [ 45.672104][ T3753] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 45.672117][ T3753] RBP: 00007f5820a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 45.672130][ T3753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.672143][ T3753] R13: 00007f5822246038 R14: 00007f5822245fa0 R15: 00007ffd1ef7d7a8 [ 45.672170][ T3753] [ 45.930188][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.020176][ T3759] netlink: 36 bytes leftover after parsing attributes in process `syz.3.72'. [ 46.058248][ T3760] loop0: detected capacity change from 0 to 256 [ 46.066902][ T3760] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.093630][ T3760] bridge1: entered allmulticast mode [ 46.171110][ T3765] FAULT_INJECTION: forcing a failure. [ 46.171110][ T3765] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 46.294931][ T3765] CPU: 1 UID: 0 PID: 3765 Comm: syz.1.73 Not tainted syzkaller #0 PREEMPT(lazy) [ 46.294963][ T3765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 46.294988][ T3765] Call Trace: [ 46.294997][ T3765] [ 46.295008][ T3765] __dump_stack+0x1d/0x30 [ 46.295040][ T3765] dump_stack_lvl+0x95/0xd0 [ 46.295065][ T3765] dump_stack+0x15/0x1b [ 46.295084][ T3765] should_fail_ex+0x25e/0x270 [ 46.295195][ T3765] should_fail+0xb/0x20 [ 46.295274][ T3765] should_fail_usercopy+0x1a/0x20 [ 46.295300][ T3765] _copy_from_iter+0xcc/0xe70 [ 46.295351][ T3765] ? __alloc_skb+0x511/0x6f0 [ 46.295388][ T3765] ? __alloc_skb+0x205/0x6f0 [ 46.295418][ T3765] netlink_sendmsg+0x4a4/0x6f0 [ 46.295496][ T3765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 46.295524][ T3765] ____sys_sendmsg+0x532/0x580 [ 46.295568][ T3765] ___sys_sendmsg+0x195/0x1e0 [ 46.295626][ T3765] __x64_sys_sendmsg+0xd4/0x160 [ 46.295720][ T3765] x64_sys_call+0x194c/0x3020 [ 46.295874][ T3765] do_syscall_64+0x136/0x3c0 [ 46.295902][ T3765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.296005][ T3765] RIP: 0033:0x7fe4dfcace59 [ 46.296021][ T3765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.296042][ T3765] RSP: 002b:00007fe4de707028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.296137][ T3765] RAX: ffffffffffffffda RBX: 00007fe4dff25fa0 RCX: 00007fe4dfcace59 [ 46.296156][ T3765] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 46.296170][ T3765] RBP: 00007fe4de707090 R08: 0000000000000000 R09: 0000000000000000 [ 46.296182][ T3765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.296198][ T3765] R13: 00007fe4dff26038 R14: 00007fe4dff25fa0 R15: 00007ffe418ac308 [ 46.296221][ T3765] [ 46.861314][ T11] tipc: Node number set to 2886997162 [ 46.907160][ T3768] set_capacity_and_notify: 1 callbacks suppressed [ 46.907176][ T3768] loop1: detected capacity change from 0 to 512 [ 46.950613][ T3768] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.968789][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 46.968803][ T28] audit: type=1400 audit(1781629866.580:321): avc: denied { create } for pid=3770 comm="syz.2.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 47.017250][ T3768] EXT4-fs (loop1): 1 truncate cleaned up [ 47.032348][ T3768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.051931][ T3773] process 'syz.2.76' launched '/dev/fd/4' with NULL argv: empty string added [ 47.072288][ T28] audit: type=1400 audit(1781629866.610:322): avc: denied { read } for pid=3770 comm="syz.2.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 47.145563][ T3768] gretap0 speed is unknown, defaulting to 1000 [ 47.163275][ T28] audit: type=1400 audit(1781629866.670:323): avc: denied { execute } for pid=3770 comm="syz.2.76" dev="tmpfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 47.257744][ T28] audit: type=1400 audit(1781629866.710:324): avc: denied { create } for pid=3774 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 47.333129][ T28] audit: type=1400 audit(1781629866.710:325): avc: denied { execute_no_trans } for pid=3770 comm="syz.2.76" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 47.455700][ T28] audit: type=1400 audit(1781629866.710:326): avc: denied { read } for pid=3774 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 47.534426][ T28] audit: type=1400 audit(1781629866.720:327): avc: denied { write } for pid=3767 comm="syz.1.75" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.572473][ T3780] loop4: detected capacity change from 0 to 128 [ 47.625303][ T28] audit: type=1400 audit(1781629866.720:328): avc: denied { setopt } for pid=3774 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.704325][ T28] audit: type=1400 audit(1781629866.720:329): avc: denied { bind } for pid=3774 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.753677][ T3387] hid-generic 0F0B:70BD2E:0004.0001: unknown main item tag 0x0 [ 47.782325][ T3387] hid-generic 0F0B:70BD2E:0004.0001: unknown main item tag 0x0 [ 47.800129][ T28] audit: type=1400 audit(1781629866.720:330): avc: denied { name_bind } for pid=3774 comm="syz.4.77" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 47.828814][ T3387] hid-generic 0F0B:70BD2E:0004.0001: unknown main item tag 0x0 [ 47.855132][ T3387] hid-generic 0F0B:70BD2E:0004.0001: unknown main item tag 0x0 [ 47.914258][ T3387] hid-generic 0F0B:70BD2E:0004.0001: unknown main item tag 0x0 [ 47.971767][ T3387] hid-generic 0F0B:70BD2E:0004.0001: unknown main item tag 0x0 [ 47.994939][ T3783] FAULT_INJECTION: forcing a failure. [ 47.994939][ T3783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.016301][ T3387] hid-generic 0F0B:70BD2E:0004.0001: unknown main item tag 0x0 [ 48.048367][ T3387] hid-generic 0F0B:70BD2E:0004.0001: unknown main item tag 0x0 [ 48.069993][ T3754] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 48.073705][ T3783] CPU: 1 UID: 0 PID: 3783 Comm: syz.3.80 Not tainted syzkaller #0 PREEMPT(lazy) [ 48.073798][ T3783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 48.073841][ T3783] Call Trace: [ 48.073905][ T3783] [ 48.073937][ T3783] __dump_stack+0x1d/0x30 [ 48.074083][ T3783] dump_stack_lvl+0x95/0xd0 [ 48.074343][ T3783] dump_stack+0x15/0x1b [ 48.074446][ T3783] should_fail_ex+0x25e/0x270 [ 48.074531][ T3783] should_fail+0xb/0x20 [ 48.074614][ T3783] should_fail_usercopy+0x1a/0x20 [ 48.074709][ T3783] _copy_from_user+0x1c/0xb0 [ 48.074847][ T3783] ucma_write+0xd8/0x260 [ 48.074939][ T3783] vfs_writev+0x41e/0x8b0 [ 48.075046][ T3783] ? __pfx_ucma_write+0x10/0x10 [ 48.075150][ T3783] do_writev+0xe9/0x210 [ 48.075228][ T3783] __x64_sys_writev+0x45/0x50 [ 48.075342][ T3783] x64_sys_call+0x1c0c/0x3020 [ 48.075428][ T3783] do_syscall_64+0x136/0x3c0 [ 48.075497][ T3783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.075580][ T3783] RIP: 0033:0x7f94843cce59 [ 48.075628][ T3783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.075801][ T3783] RSP: 002b:00007f9482e27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 48.075894][ T3783] RAX: ffffffffffffffda RBX: 00007f9484645fa0 RCX: 00007f94843cce59 [ 48.075958][ T3783] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000009 [ 48.076000][ T3783] RBP: 00007f9482e27090 R08: 0000000000000000 R09: 0000000000000000 [ 48.076043][ T3783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.076085][ T3783] R13: 00007f9484646038 R14: 00007f9484645fa0 R15: 00007ffd6cec67a8 [ 48.076157][ T3783] [ 48.077347][ T3387] hid-generic 0F0B:70BD2E:0004.0001: unknown main item tag 0x0 [ 48.078268][ T3754] FAT-fs (loop0): Filesystem has been set read-only [ 48.137262][ T3387] hid-generic 0F0B:70BD2E:0004.0001: unknown main item tag 0x0 [ 48.150899][ T3754] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 48.280053][ T3754] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 48.283180][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.288048][ T3754] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 48.310768][ T3387] hid-generic 0F0B:70BD2E:0004.0001: hidraw0: HID v1200.00 Device [syz1] on syz0 [ 48.387024][ T3790] fido_id[3790]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 48.448926][ T3794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'. [ 48.465849][ T3794] netlink: 3 bytes leftover after parsing attributes in process `syz.1.82'. [ 48.515373][ T3796] loop3: detected capacity change from 0 to 128 [ 48.542112][ T3796] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.562980][ T3805] loop2: detected capacity change from 0 to 512 [ 48.583540][ T3796] ext4 filesystem being mounted at /13/bus/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.596025][ T3812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3812 comm=syz.1.82 [ 48.621135][ T3805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.668025][ T3805] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.723361][ T3808] loop4: detected capacity change from 0 to 8192 [ 48.791390][ T3802] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 48.804086][ T3802] bond1 (unregistering): Released all slaves [ 48.824222][ T3808] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 48.835582][ T3808] bond1 (unregistering): Released all slaves [ 49.008695][ T3823] FAULT_INJECTION: forcing a failure. [ 49.008695][ T3823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.039076][ T3823] CPU: 0 UID: 0 PID: 3823 Comm: syz.0.89 Not tainted syzkaller #0 PREEMPT(lazy) [ 49.039112][ T3823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 49.039129][ T3823] Call Trace: [ 49.039138][ T3823] [ 49.039146][ T3823] __dump_stack+0x1d/0x30 [ 49.039245][ T3823] dump_stack_lvl+0x95/0xd0 [ 49.039268][ T3823] dump_stack+0x15/0x1b [ 49.039296][ T3823] should_fail_ex+0x25e/0x270 [ 49.039329][ T3823] should_fail+0xb/0x20 [ 49.039359][ T3823] should_fail_usercopy+0x1a/0x20 [ 49.039472][ T3823] _copy_to_user+0x20/0xa0 [ 49.039567][ T3823] simple_read_from_buffer+0xb5/0x130 [ 49.039600][ T3823] proc_fail_nth_read+0x10e/0x150 [ 49.039628][ T3823] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 49.039694][ T3823] vfs_read+0x18e/0x7c0 [ 49.039736][ T3823] ? irqentry_exit+0x58f/0x610 [ 49.039776][ T3823] ? __rcu_read_unlock+0x4e/0x70 [ 49.039864][ T3823] ? __fget_files+0x184/0x1c0 [ 49.039894][ T3823] ? mutex_lock+0x57/0x90 [ 49.039934][ T3823] ksys_read+0xdc/0x1a0 [ 49.040036][ T3823] __x64_sys_read+0x40/0x50 [ 49.040070][ T3823] x64_sys_call+0x2886/0x3020 [ 49.040103][ T3823] do_syscall_64+0x136/0x3c0 [ 49.040133][ T3823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.040273][ T3823] RIP: 0033:0x7f90a6ead68e [ 49.040294][ T3823] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 49.040318][ T3823] RSP: 002b:00007f90a593efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.040344][ T3823] RAX: ffffffffffffffda RBX: 00007f90a593f6c0 RCX: 00007f90a6ead68e [ 49.040363][ T3823] RDX: 000000000000000f RSI: 00007f90a593f0a0 RDI: 0000000000000007 [ 49.040445][ T3823] RBP: 00007f90a593f090 R08: 0000000000000000 R09: 0000000000000000 [ 49.040464][ T3823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.040481][ T3823] R13: 00007f90a7166038 R14: 00007f90a7165fa0 R15: 00007ffd56dc98e8 [ 49.040509][ T3823] [ 49.263543][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.403974][ T3841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'. [ 49.414559][ T3841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.92'. [ 49.423846][ T3841] veth1_vlan: left promiscuous mode [ 50.255606][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.462472][ T3855] loop3: detected capacity change from 0 to 128 [ 50.483651][ T3855] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 50.496572][ T3855] FAT-fs (loop3): Filesystem has been set read-only [ 50.596473][ T3866] loop2: detected capacity change from 0 to 128 [ 50.641968][ T3869] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 50.666196][ T3869] SELinux: failed to load policy [ 50.708574][ T3868] loop3: detected capacity change from 0 to 128 [ 50.792067][ T3878] loop4: detected capacity change from 0 to 128 [ 50.806390][ T3415] hid-generic 0F0B:70BD2E:0004.0002: hidraw0: HID v1200.00 Device [syz1] on syz0 [ 50.831911][ T3878] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.870570][ T3878] ext4 filesystem being mounted at /27/bus/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.100057][ T3857] loop0: detected capacity change from 0 to 512 [ 51.141584][ T3857] EXT4-fs: Ignoring removed i_version option [ 51.246974][ T3891] No such timeout policy "syz0" [ 51.385313][ T3857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.400103][ T3857] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.547051][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.425757][ T3857] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 52.902300][ T3900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.111'. [ 52.912401][ T3900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.111'. [ 52.968361][ T3904] netlink: 'syz.1.113': attribute type 14 has an invalid length. [ 53.022722][ T3857] netlink: 36 bytes leftover after parsing attributes in process `syz.0.100'. [ 53.066602][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 53.066620][ T28] audit: type=1400 audit(1781629872.680:348): avc: denied { compute_member } for pid=3902 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 53.094044][ T3903] netlink: 40 bytes leftover after parsing attributes in process `syz.1.113'. [ 53.148238][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.151336][ T3911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.117'. [ 53.189754][ T28] audit: type=1400 audit(1781629872.800:349): avc: denied { bind } for pid=3908 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.222461][ T28] audit: type=1400 audit(1781629872.800:350): avc: denied { name_bind } for pid=3908 comm="syz.2.115" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 53.233282][ T3916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.116'. [ 53.245273][ T28] audit: type=1400 audit(1781629872.800:351): avc: denied { node_bind } for pid=3908 comm="syz.2.115" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 53.277931][ T28] audit: type=1400 audit(1781629872.820:352): avc: denied { connect } for pid=3908 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.297855][ T28] audit: type=1400 audit(1781629872.820:353): avc: denied { name_connect } for pid=3908 comm="syz.2.115" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 53.365637][ T3925] FAULT_INJECTION: forcing a failure. [ 53.365637][ T3925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.382916][ T3925] CPU: 1 UID: 0 PID: 3925 Comm: syz.1.120 Not tainted syzkaller #0 PREEMPT(lazy) [ 53.383018][ T3925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 53.383034][ T3925] Call Trace: [ 53.383116][ T3925] [ 53.383126][ T3925] __dump_stack+0x1d/0x30 [ 53.383160][ T3925] dump_stack_lvl+0x95/0xd0 [ 53.383188][ T3925] dump_stack+0x15/0x1b [ 53.383214][ T3925] should_fail_ex+0x25e/0x270 [ 53.383328][ T3925] should_fail+0xb/0x20 [ 53.383381][ T3925] should_fail_usercopy+0x1a/0x20 [ 53.383418][ T3925] _copy_from_user+0x1c/0xb0 [ 53.383521][ T3925] ip_tunnel_parm_from_user+0x4c/0x260 [ 53.383566][ T3925] ip_tunnel_siocdevprivate+0x45/0xe0 [ 53.383675][ T3925] dev_ifsioc+0x8f5/0xfc0 [ 53.383702][ T3925] dev_ioctl+0x78c/0x960 [ 53.383772][ T3925] sock_ioctl+0x58f/0x610 [ 53.383803][ T3925] ? __pfx_sock_ioctl+0x10/0x10 [ 53.383892][ T3925] __se_sys_ioctl+0xce/0x140 [ 53.383935][ T3925] __x64_sys_ioctl+0x43/0x50 [ 53.384052][ T3925] x64_sys_call+0x1563/0x3020 [ 53.384111][ T3925] do_syscall_64+0x136/0x3c0 [ 53.384134][ T3925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.384164][ T3925] RIP: 0033:0x7fe4dfcace59 [ 53.384184][ T3925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.384209][ T3925] RSP: 002b:00007fe4de707028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.384311][ T3925] RAX: ffffffffffffffda RBX: 00007fe4dff25fa0 RCX: 00007fe4dfcace59 [ 53.384331][ T3925] RDX: 0000200000000380 RSI: 00000000000089f8 RDI: 0000000000000003 [ 53.384349][ T3925] RBP: 00007fe4de707090 R08: 0000000000000000 R09: 0000000000000000 [ 53.384367][ T3925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.384384][ T3925] R13: 00007fe4dff26038 R14: 00007fe4dff25fa0 R15: 00007ffe418ac308 [ 53.384441][ T3925] [ 53.622993][ T3928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 53.796883][ T3935] loop0: detected capacity change from 0 to 512 [ 53.828991][ T3935] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.905695][ T3935] EXT4-fs (loop0): orphan cleanup on readonly fs [ 53.913447][ T3935] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.123: ea_inode file size=4 entry size=6 [ 53.927023][ T3935] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 53.940469][ T3935] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.123: corrupted inode contents [ 53.953717][ T3935] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.954294][ T3935] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #15: comm syz.0.123: mark_inode_dirty error [ 53.963520][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 53.963541][ C0] EXT4-fs (loop0): initial error at time 1781629873: ext4_do_update_inode:5690: inode 15 [ 53.963574][ C0] EXT4-fs (loop0): last error at time 1781629873: ext4_do_update_inode:5690: inode 15 [ 54.060631][ T3935] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 54.077945][ T3935] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.123: corrupted inode contents [ 54.115305][ T3942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.125'. [ 54.149862][ T3942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.125'. [ 54.173221][ T3935] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 54.183933][ T3935] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.123: mark_inode_dirty error [ 54.671275][ T3935] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.101325][ T3935] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.123: mark inode dirty (error -117) [ 55.174123][ T3935] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.174355][ T3935] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 55.197055][ T3951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.129'. [ 55.227831][ T3942] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.235198][ T3942] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.236095][ T3935] EXT4-fs (loop0): 1 orphan inode deleted [ 55.287596][ T3935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.341982][ T3942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.352079][ T3942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.356791][ T3945] FAULT_INJECTION: forcing a failure. [ 55.356791][ T3945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.404148][ T28] audit: type=1400 audit(1781629875.010:354): avc: denied { shutdown } for pid=3931 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.426051][ T3932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.123'. [ 55.451419][ T3945] CPU: 0 UID: 0 PID: 3945 Comm: syz.2.126 Not tainted syzkaller #0 PREEMPT(lazy) [ 55.451471][ T3945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 55.451494][ T3945] Call Trace: [ 55.451502][ T3945] [ 55.451532][ T3945] __dump_stack+0x1d/0x30 [ 55.451573][ T3945] dump_stack_lvl+0x95/0xd0 [ 55.451603][ T3945] dump_stack+0x15/0x1b [ 55.451643][ T3945] should_fail_ex+0x25e/0x270 [ 55.451675][ T3945] ? __pfx_ucma_accept+0x10/0x10 [ 55.451732][ T3945] should_fail+0xb/0x20 [ 55.451762][ T3945] should_fail_usercopy+0x1a/0x20 [ 55.451797][ T3945] _copy_from_user+0x1c/0xb0 [ 55.451838][ T3945] ucma_accept+0xb6/0x6e0 [ 55.451920][ T3945] ? __pfx_ucma_accept+0x10/0x10 [ 55.451950][ T3945] ucma_write+0x1c9/0x260 [ 55.451978][ T3945] vfs_writev+0x41e/0x8b0 [ 55.452022][ T3945] ? __pfx_ucma_write+0x10/0x10 [ 55.452060][ T3945] do_writev+0xe9/0x210 [ 55.452100][ T3945] __x64_sys_writev+0x45/0x50 [ 55.452126][ T3945] x64_sys_call+0x1c0c/0x3020 [ 55.452176][ T3945] do_syscall_64+0x136/0x3c0 [ 55.452231][ T3945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.452260][ T3945] RIP: 0033:0x7f5cdaa9ce59 [ 55.452287][ T3945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.452391][ T3945] RSP: 002b:00007f5cd94f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 55.452422][ T3945] RAX: ffffffffffffffda RBX: 00007f5cdad15fa0 RCX: 00007f5cdaa9ce59 [ 55.452477][ T3945] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000009 [ 55.452495][ T3945] RBP: 00007f5cd94f7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.452513][ T3945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.452529][ T3945] R13: 00007f5cdad16038 R14: 00007f5cdad15fa0 R15: 00007ffca087f5b8 [ 55.452557][ T3945] [ 55.514109][ T3932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.123'. [ 55.655242][ T28] audit: type=1400 audit(1781629875.040:355): avc: denied { connect } for pid=3931 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 55.661536][ T3962] netlink: 'syz.4.130': attribute type 21 has an invalid length. [ 55.674753][ T28] audit: type=1400 audit(1781629875.040:356): avc: denied { bind } for pid=3931 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 55.674784][ T28] audit: type=1400 audit(1781629875.170:357): avc: denied { write } for pid=3961 comm="syz.1.131" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.740620][ T3964] loop1: detected capacity change from 0 to 512 [ 55.820034][ T1732] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.830039][ T1732] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.840134][ T1732] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.850305][ T1732] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.871432][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.891791][ T3973] loop3: detected capacity change from 0 to 512 [ 55.920077][ T3973] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.134: inode has both inline data and extents flags [ 55.944320][ T3973] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.944486][ T3973] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.134: couldn't read orphan inode 15 (err -117) [ 55.953976][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 55.953995][ C1] EXT4-fs (loop3): initial error at time 1781629875: ext4_orphan_get:1399: inode 15 [ 55.954025][ C1] EXT4-fs (loop3): last error at time 1781629875: ext4_orphan_get:1399: inode 15 [ 55.999457][ T3962] netlink: 132 bytes leftover after parsing attributes in process `syz.4.130'. [ 56.010725][ T3973] loop3: lost filesystem error report for type 5 error -117 [ 56.013002][ T3973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.045070][ T3979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.135'. [ 56.152462][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.171453][ T3991] netlink: 216 bytes leftover after parsing attributes in process `syz.2.139'. [ 56.181298][ T3993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.140'. [ 56.702175][ T4012] loop3: detected capacity change from 0 to 512 [ 57.123510][ T4004] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 57.129742][ T4012] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.142: corrupted inode contents [ 57.153943][ T4012] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 57.160760][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 57.176403][ C0] EXT4-fs (loop3): initial error at time 1781629876: ext4_do_update_inode:5690: inode 16 [ 57.186261][ C0] EXT4-fs (loop3): last error at time 1781629876: ext4_do_update_inode:5690: inode 16 [ 57.361807][ T4012] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #16: comm syz.3.142: mark_inode_dirty error [ 57.374213][ T4012] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 57.376348][ T4012] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.142: corrupted inode contents [ 57.442612][ T4012] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 57.894818][ T4012] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.142: mark_inode_dirty error [ 57.916557][ T4012] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 57.918697][ T4012] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.142: corrupted inode contents [ 57.942274][ T4012] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 57.954295][ T4012] loop3: lost filesystem error report for type 5 error -117 [ 58.058872][ T4012] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.142: corrupted inode contents [ 58.083168][ T4012] EXT4-fs error (device loop3): ext4_truncate:4690: inode #16: comm syz.3.142: mark_inode_dirty error [ 58.096543][ T4012] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 58.106105][ T4012] loop3: lost filesystem error report for type 5 error -117 [ 58.112735][ T4012] EXT4-fs (loop3): 1 truncate cleaned up [ 58.137208][ T4012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.152224][ T4012] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.182740][ T107] __quota_error: 12 callbacks suppressed [ 58.182763][ T107] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 58.237564][ T4004] bond1 (unregistering): Released all slaves [ 58.258954][ T107] EXT4-fs error (device loop3): ext4_release_dquot:7068: comm kworker/u8:5: Failed to release dquot type 1 [ 58.827594][ T4028] bridge0: port 2(bridge_slave_1) entered listening state [ 58.890897][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.086737][ T4035] __nla_validate_parse: 3 callbacks suppressed [ 59.087264][ T4035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.150'. [ 59.126543][ T4037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.151'. [ 59.219636][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.265160][ T4043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.152'. [ 59.282033][ T28] audit: type=1400 audit(1781629878.900:370): avc: denied { create } for pid=4044 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.323319][ T28] audit: type=1400 audit(1781629878.900:371): avc: denied { bind } for pid=4042 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.379021][ T28] audit: type=1400 audit(1781629878.900:372): avc: denied { node_bind } for pid=4042 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 59.466732][ T4043] loop1: detected capacity change from 0 to 512 [ 59.533761][ T4043] EXT4-fs: Ignoring removed nobh option [ 59.555180][ T4043] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.931074][ T28] audit: type=1400 audit(1781629879.490:373): avc: denied { append } for pid=4050 comm="syz.3.156" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 60.065770][ T4058] loop2: detected capacity change from 0 to 512 [ 60.088535][ T4043] EXT4-fs error (device loop1): __ext4_iget:5481: inode #11: block 1: comm syz.1.152: invalid block [ 60.172682][ T4058] EXT4-fs (loop2): can't read group descriptor 0 [ 60.210653][ T4043] fserror_report: 3 callbacks suppressed [ 60.380902][ T4043] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 60.387787][ T4043] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.152: couldn't read orphan inode 11 (err -117) [ 60.397916][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 60.397993][ C1] EXT4-fs (loop1): initial error at time 1781629880: __ext4_iget:5481: inode 11: block 1 [ 60.398224][ C1] EXT4-fs (loop1): last error at time 1781629880: __ext4_iget:5481: inode 11: block 1 [ 60.458432][ T28] audit: type=1400 audit(1781629879.780:374): avc: denied { write } for pid=4059 comm="syz.4.158" name="tcp6" dev="proc" ino=4026532569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 60.598405][ T4065] tmpfs: Unknown parameter 'ÿÿÿÿsZ88¿ÿ' [ 60.608889][ T4054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.157'. [ 60.651354][ T4043] loop1: lost filesystem error report for type 5 error -117 [ 60.655688][ T28] audit: type=1400 audit(1781629880.270:375): avc: denied { ioctl } for pid=4059 comm="syz.4.158" path="socket:[6070]" dev="sockfs" ino=6070 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.657982][ T4043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.706964][ T4069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.161'. [ 60.721245][ T4054] team0 (unregistering): Port device team_slave_0 removed [ 60.730194][ T4054] team0 (unregistering): Port device team_slave_1 removed [ 60.753829][ T4043] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.811703][ T4071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.162'. [ 60.962351][ T28] audit: type=1400 audit(1781629880.580:376): avc: denied { ioctl } for pid=4072 comm="syz.0.163" path="socket:[6108]" dev="sockfs" ino=6108 ioctlcmd=0x54a5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.009218][ T28] audit: type=1400 audit(1781629880.600:377): avc: denied { write } for pid=4072 comm="syz.0.163" laddr=172.20.20.187 faddr=172.20.20.170 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.518519][ T4078] loop3: detected capacity change from 0 to 512 [ 61.538570][ T4078] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.551818][ T4078] EXT4-fs (loop3): orphan file too big: 4294967295 [ 61.560151][ T4078] EXT4-fs (loop3): mount failed [ 61.586093][ T28] audit: type=1400 audit(1781629881.200:378): avc: denied { ioctl } for pid=4083 comm="syz.4.166" path="socket:[6481]" dev="sockfs" ino=6481 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 61.844525][ T4097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.169'. [ 61.963334][ T4105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.171'. [ 61.974260][ T4105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.171'. [ 62.000207][ T4104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.173'. [ 62.295633][ T4113] FAULT_INJECTION: forcing a failure. [ 62.295633][ T4113] name failslab, interval 1, probability 0, space 0, times 0 [ 62.499571][ T4113] CPU: 0 UID: 0 PID: 4113 Comm: syz.0.174 Not tainted syzkaller #0 PREEMPT(lazy) [ 62.499606][ T4113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 62.499621][ T4113] Call Trace: [ 62.499628][ T4113] [ 62.499657][ T4113] __dump_stack+0x1d/0x30 [ 62.499685][ T4113] dump_stack_lvl+0x95/0xd0 [ 62.499709][ T4113] dump_stack+0x15/0x1b [ 62.499731][ T4113] should_fail_ex+0x25e/0x270 [ 62.499770][ T4113] should_failslab+0x8c/0xb0 [ 62.499857][ T4113] kmem_cache_alloc_noprof+0x66/0x3f0 [ 62.499882][ T4113] ? audit_log_start+0x34c/0x730 [ 62.499916][ T4113] audit_log_start+0x34c/0x730 [ 62.499952][ T4113] ? __schedule+0x799/0xd10 [ 62.499991][ T4113] audit_seccomp+0x49/0x110 [ 62.500025][ T4113] __seccomp_filter+0x905/0x1370 [ 62.500113][ T4113] ? irqentry_exit+0x7d/0x610 [ 62.500163][ T4113] __secure_computing+0x7d/0x150 [ 62.500189][ T4113] do_syscall_64+0xd4/0x3c0 [ 62.500218][ T4113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.500280][ T4113] RIP: 0033:0x7f90a6eece59 [ 62.500301][ T4113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.500324][ T4113] RSP: 002b:00007f90a591e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 62.500349][ T4113] RAX: ffffffffffffffda RBX: 00007f90a7166090 RCX: 00007f90a6eece59 [ 62.500369][ T4113] RDX: 0000000000000300 RSI: 0000200000004d00 RDI: 000000000000000a [ 62.500425][ T4113] RBP: 00007f90a591e090 R08: 0000000000000000 R09: 0000000000000000 [ 62.500449][ T4113] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000001 [ 62.500464][ T4113] R13: 00007f90a7166128 R14: 00007f90a7166090 R15: 00007ffd56dc98e8 [ 62.500488][ T4113] [ 63.267714][ T28] kauditd_printk_skb: 273 callbacks suppressed [ 63.267735][ T28] audit: type=1326 audit(1781629882.880:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4108 comm="syz.2.175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5cdaa9ce59 code=0x7ffc0000 [ 63.366979][ T4135] loop3: detected capacity change from 0 to 128 [ 63.473737][ T4135] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.620229][ T4135] FAT-fs (loop3): bogus number of FAT sectors [ 63.627048][ T28] audit: type=1326 audit(1781629882.920:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4108 comm="syz.2.175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5cdaa9ce59 code=0x7ffc0000 [ 63.660151][ T4135] FAT-fs (loop3): Can't find a valid FAT filesystem [ 63.780668][ T28] audit: type=1400 audit(1781629883.310:652): avc: denied { mount } for pid=4133 comm="syz.3.181" name="/" dev="ramfs" ino=6543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 63.870023][ T4144] loop2: detected capacity change from 0 to 1024 [ 63.878200][ T4144] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 63.967842][ T4144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.030689][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.171490][ T4158] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 64.206948][ T4158] bond1 (unregistering): Released all slaves [ 64.215398][ T4164] FAULT_INJECTION: forcing a failure. [ 64.215398][ T4164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.233267][ T4164] CPU: 0 UID: 0 PID: 4164 Comm: syz.0.191 Not tainted syzkaller #0 PREEMPT(lazy) [ 64.233318][ T4164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 64.233361][ T4164] Call Trace: [ 64.233369][ T4164] [ 64.233380][ T4164] __dump_stack+0x1d/0x30 [ 64.233410][ T4164] dump_stack_lvl+0x95/0xd0 [ 64.233445][ T4164] dump_stack+0x15/0x1b [ 64.233512][ T4164] should_fail_ex+0x25e/0x270 [ 64.233541][ T4164] should_fail+0xb/0x20 [ 64.233621][ T4164] should_fail_usercopy+0x1a/0x20 [ 64.233716][ T4164] _copy_from_user+0x1c/0xb0 [ 64.233759][ T4164] ___sys_sendmsg+0xc1/0x1e0 [ 64.233856][ T4164] __x64_sys_sendmsg+0xd4/0x160 [ 64.233902][ T4164] x64_sys_call+0x194c/0x3020 [ 64.233934][ T4164] do_syscall_64+0x136/0x3c0 [ 64.233959][ T4164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.234205][ T4164] RIP: 0033:0x7f90a6eece59 [ 64.234226][ T4164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.234247][ T4164] RSP: 002b:00007f90a593f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.234274][ T4164] RAX: ffffffffffffffda RBX: 00007f90a7165fa0 RCX: 00007f90a6eece59 [ 64.234391][ T4164] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 64.234406][ T4164] RBP: 00007f90a593f090 R08: 0000000000000000 R09: 0000000000000000 [ 64.234430][ T4164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.234447][ T4164] R13: 00007f90a7166038 R14: 00007f90a7165fa0 R15: 00007ffd56dc98e8 [ 64.234525][ T4164] [ 64.440965][ T4160] syz_tun: entered allmulticast mode [ 65.028152][ T4177] loop4: detected capacity change from 0 to 512 [ 65.182907][ T4154] syz_tun: left allmulticast mode [ 65.211737][ T4177] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.193: corrupted inode contents [ 65.224032][ T4177] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.225928][ T4177] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.193: mark_inode_dirty error [ 65.235626][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 65.235655][ C1] EXT4-fs (loop4): initial error at time 1781629884: ext4_do_update_inode:5690: inode 16 [ 65.235795][ C1] EXT4-fs (loop4): last error at time 1781629884: ext4_do_update_inode:5690: inode 16 [ 65.276936][ T4177] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.279238][ T4177] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.193: corrupted inode contents [ 65.302097][ T4177] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.304604][ T4177] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.193: mark_inode_dirty error [ 65.325934][ T4177] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.327800][ T4177] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.193: corrupted inode contents [ 65.350028][ T4177] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.351976][ T4177] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 65.370880][ T4177] loop4: lost filesystem error report for type 5 error -117 [ 65.372768][ T4177] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.193: corrupted inode contents [ 65.393391][ T4177] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.394928][ T4177] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.193: mark_inode_dirty error [ 65.416521][ T4177] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.419166][ T4177] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 65.438252][ T4177] loop4: lost filesystem error report for type 5 error -117 [ 65.445792][ T4177] EXT4-fs (loop4): 1 truncate cleaned up [ 65.469306][ T4177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.484665][ T4177] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.485356][ T36] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 65.521223][ T36] EXT4-fs error (device loop4): ext4_release_dquot:7068: comm kworker/u8:2: Failed to release dquot type 1 [ 65.655176][ T4174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.899855][ T4174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.907577][ T4178] loop0: detected capacity change from 0 to 512 [ 65.951208][ T4178] EXT4-fs (loop0): orphan cleanup on readonly fs [ 65.996046][ T4178] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.194: corrupted inode contents [ 66.021557][ T4178] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.030761][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 66.046561][ C0] EXT4-fs (loop0): initial error at time 1781629885: ext4_do_update_inode:5690: inode 15 [ 66.056678][ C0] EXT4-fs (loop0): last error at time 1781629885: ext4_do_update_inode:5690: inode 15 [ 66.073891][ T4178] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 66.114029][ T4178] loop0: lost filesystem error report for type 5 error -117 [ 66.114754][ T4178] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.194: corrupted inode contents [ 66.150780][ T4178] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.151139][ T4178] EXT4-fs error (device loop0): ext4_evict_inode:315: inode #15: comm syz.0.194: mark_inode_dirty error [ 66.308178][ T4174] loop2: detected capacity change from 0 to 512 [ 66.329853][ T4178] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.331119][ T4178] EXT4-fs (loop0): 1 orphan inode deleted [ 66.401824][ T4174] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 66.459831][ T4177] syz.4.193 (4177) used greatest stack depth: 8576 bytes left [ 66.481328][ T4178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 66.518232][ T4174] EXT4-fs (loop2): 1 truncate cleaned up [ 66.555943][ T4174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.631530][ T28] audit: type=1400 audit(1781629886.230:653): avc: denied { write } for pid=4171 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.714675][ T4174] dvmrp1: tun_chr_ioctl cmd 2147767520 [ 66.746493][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.760244][ T4174] Invalid option length (2279) for dns_resolver key [ 66.905966][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.067916][ T4190] loop0: detected capacity change from 0 to 128 [ 67.078718][ T4190] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.125341][ T4190] ext4 filesystem being mounted at /36/bus/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.136732][ T4191] loop4: detected capacity change from 0 to 128 [ 67.157917][ T28] audit: type=1400 audit(1781629886.770:654): avc: denied { write } for pid=4186 comm="syz.0.196" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.203961][ T4191] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.228136][ T4191] ext4 filesystem being mounted at /46/bus/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.247397][ T28] audit: type=1400 audit(1781629886.770:655): avc: denied { add_name } for pid=4186 comm="syz.0.196" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.271246][ T28] audit: type=1400 audit(1781629886.810:656): avc: denied { write } for pid=4186 comm="syz.0.196" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.295598][ T28] audit: type=1400 audit(1781629886.910:657): avc: denied { ioctl } for pid=4200 comm="syz.3.199" path="socket:[7303]" dev="sockfs" ino=7303 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.320294][ T28] audit: type=1400 audit(1781629886.910:658): avc: denied { read } for pid=4200 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.357598][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.511607][ T4205] loop2: detected capacity change from 0 to 512 [ 67.521320][ T4205] ext3: Unknown parameter 'uid' [ 67.532343][ T4205] __nla_validate_parse: 1 callbacks suppressed [ 67.532357][ T4205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'. [ 67.782636][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.815180][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.840924][ T4209] loop0: detected capacity change from 0 to 512 [ 67.878930][ T4209] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.901728][ T4209] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 67.915722][ T4208] syzkaller0: entered promiscuous mode [ 67.926839][ T4209] EXT4-fs (loop0): 1 truncate cleaned up [ 67.936292][ T4209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.947629][ T4208] syzkaller0: entered allmulticast mode [ 67.961673][ T4209] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2810: inode #15: comm syz.0.201: corrupted xattr block 33: invalid header [ 67.997450][ T4209] EXT4-fs (loop0): Remounting filesystem read-only [ 68.042628][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.222006][ T4224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.204'. [ 68.232904][ T4224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.204'. [ 68.322259][ T4225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.206'. [ 68.530327][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 68.530388][ T28] audit: type=1400 audit(1781629888.140:666): avc: denied { ioctl } for pid=4230 comm="syz.2.209" path="socket:[7365]" dev="sockfs" ino=7365 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.566691][ T4232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.208'. [ 68.720714][ T28] audit: type=1400 audit(1781629888.210:667): avc: denied { execute } for pid=4230 comm="syz.2.209" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=7368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 68.913243][ T4248] loop2: detected capacity change from 0 to 128 [ 68.942572][ T4248] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.962735][ T4248] ext4 filesystem being mounted at /36/bus/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.999850][ T28] audit: type=1400 audit(1781629888.610:668): avc: denied { write } for pid=4237 comm="syz.2.211" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.045974][ T28] audit: type=1400 audit(1781629888.640:669): avc: denied { write } for pid=4237 comm="syz.2.211" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.069022][ T4251] syzkaller0: entered promiscuous mode [ 69.075466][ T4251] syzkaller0: entered allmulticast mode [ 69.084639][ T4254] syz.4.215 (4254) used obsolete PPPIOCDETACH ioctl [ 69.100568][ T28] audit: type=1400 audit(1781629888.710:670): avc: denied { connect } for pid=4246 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.152640][ T28] audit: type=1400 audit(1781629888.740:671): avc: denied { write } for pid=4246 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.271032][ T4262] netlink: 28 bytes leftover after parsing attributes in process `syz.4.217'. [ 69.280279][ T4262] netlink: 72 bytes leftover after parsing attributes in process `syz.4.217'. [ 69.368689][ T4264] netlink: 72 bytes leftover after parsing attributes in process `syz.0.218'. [ 69.371997][ T4266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 69.387442][ T4266] netlink: 3 bytes leftover after parsing attributes in process `syz.1.219'. [ 69.404161][ T28] audit: type=1400 audit(1781629889.020:672): avc: denied { bind } for pid=4263 comm="syz.0.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.424438][ T28] audit: type=1400 audit(1781629889.020:673): avc: denied { nlmsg_read } for pid=4263 comm="syz.0.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.475408][ T4268] loop4: detected capacity change from 0 to 512 [ 69.484449][ T4268] EXT4-fs: Ignoring removed nobh option [ 69.490955][ T4268] EXT4-fs: Ignoring removed oldalloc option [ 69.510281][ T4268] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 69.519561][ T4271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4271 comm=syz.1.219 [ 69.532671][ T4268] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.220: invalid indirect mapped block 256 (level 1) [ 69.551620][ T4271] 9p: Bad value for 'wfdno' [ 69.559167][ T4268] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.220: invalid indirect mapped block 2683928664 (level 1) [ 69.573066][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 69.573091][ C0] EXT4-fs (loop4): initial error at time 1781629889: ext4_free_branches:1023: inode 13 [ 69.573132][ C0] EXT4-fs (loop4): last error at time 1781629889: ext4_free_branches:1023: inode 13 [ 69.600208][ T4268] EXT4-fs (loop4): 1 truncate cleaned up [ 69.614656][ T4269] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 69.618528][ T4268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.639348][ T4269] bond1 (unregistering): Released all slaves [ 69.664600][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.675781][ T4277] loop3: detected capacity change from 0 to 128 [ 69.692536][ T4277] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.709781][ T4277] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.721098][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.752097][ T28] audit: type=1400 audit(1781629889.360:674): avc: denied { write } for pid=4276 comm="syz.3.222" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.846984][ T28] audit: type=1400 audit(1781629889.450:675): avc: denied { ioctl } for pid=4283 comm="syz.4.224" path="socket:[6739]" dev="sockfs" ino=6739 ioctlcmd=0x581e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.018423][ T4288] EXT4-fs: inline encryption not supported [ 70.036370][ T4288] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0003] [ 70.045435][ T4288] System zones: 0-5 [ 70.061668][ T4288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.138393][ T4298] FAULT_INJECTION: forcing a failure. [ 70.138393][ T4298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.153389][ T4298] CPU: 1 UID: 0 PID: 4298 Comm: syz.0.230 Not tainted syzkaller #0 PREEMPT(lazy) [ 70.153433][ T4298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 70.153449][ T4298] Call Trace: [ 70.153457][ T4298] [ 70.153466][ T4298] __dump_stack+0x1d/0x30 [ 70.153497][ T4298] dump_stack_lvl+0x95/0xd0 [ 70.153576][ T4298] dump_stack+0x15/0x1b [ 70.153603][ T4298] should_fail_ex+0x25e/0x270 [ 70.153635][ T4298] should_fail+0xb/0x20 [ 70.153662][ T4298] should_fail_usercopy+0x1a/0x20 [ 70.153792][ T4298] _copy_to_user+0x20/0xa0 [ 70.153827][ T4298] simple_read_from_buffer+0xb5/0x130 [ 70.153860][ T4298] proc_fail_nth_read+0x10e/0x150 [ 70.153887][ T4298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.153974][ T4298] vfs_read+0x18e/0x7c0 [ 70.154022][ T4298] ksys_read+0xdc/0x1a0 [ 70.154061][ T4298] __x64_sys_read+0x40/0x50 [ 70.154104][ T4298] x64_sys_call+0x2886/0x3020 [ 70.154190][ T4298] do_syscall_64+0x136/0x3c0 [ 70.154219][ T4298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.154248][ T4298] RIP: 0033:0x7f90a6ead68e [ 70.154269][ T4298] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 70.154366][ T4298] RSP: 002b:00007f90a593efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.154392][ T4298] RAX: ffffffffffffffda RBX: 00007f90a593f6c0 RCX: 00007f90a6ead68e [ 70.154417][ T4298] RDX: 000000000000000f RSI: 00007f90a593f0a0 RDI: 0000000000000004 [ 70.154434][ T4298] RBP: 00007f90a593f090 R08: 0000000000000000 R09: 0000000000000000 [ 70.154453][ T4298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.154468][ T4298] R13: 00007f90a7166038 R14: 00007f90a7165fa0 R15: 00007ffd56dc98e8 [ 70.154510][ T4298] [ 70.154987][ T4296] set_capacity_and_notify: 1 callbacks suppressed [ 70.155000][ T4296] loop4: detected capacity change from 0 to 512 [ 70.351290][ T4296] ext3: Unknown parameter 'nouser_xattr' [ 70.542960][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.279338][ T4322] loop0: detected capacity change from 0 to 128 [ 71.322789][ T4322] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.370871][ T4322] ext4 filesystem being mounted at /45/bus/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.595045][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.805729][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.621867][ T4336] __nla_validate_parse: 1 callbacks suppressed [ 72.621886][ T4336] netlink: 44 bytes leftover after parsing attributes in process `syz.3.241'. [ 72.840768][ T4334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 73.111718][ T4342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 73.144325][ T4336] sctp: [Deprecated]: syz.3.241 (pid 4336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 73.144325][ T4336] Use struct sctp_sack_info instead [ 73.202018][ T4342] netlink: 'syz.2.239': attribute type 20 has an invalid length. [ 73.274250][ T4342] netlink: 'syz.2.239': attribute type 21 has an invalid length. [ 73.502839][ T4349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.244'. [ 73.738959][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 73.738989][ T28] audit: type=1400 audit(1781629893.350:687): avc: denied { setopt } for pid=4338 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.114269][ T28] audit: type=1400 audit(1781629893.730:688): avc: denied { bind } for pid=4357 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.169230][ T4360] loop1: detected capacity change from 0 to 512 [ 74.199854][ T4360] ext3: Unknown parameter 'nouser_xattr' [ 74.211815][ T28] audit: type=1400 audit(1781629893.730:689): avc: denied { listen } for pid=4357 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.360845][ T28] audit: type=1400 audit(1781629893.750:690): avc: denied { accept } for pid=4357 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.067165][ T4379] Cannot find set identified by id 0 to match [ 75.098653][ T28] audit: type=1400 audit(1781629893.750:691): avc: denied { getopt } for pid=4357 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.119619][ T28] audit: type=1400 audit(1781629893.770:692): avc: denied { read } for pid=4357 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.139085][ T28] audit: type=1400 audit(1781629894.380:693): avc: denied { connect } for pid=4367 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 75.261273][ T28] audit: type=1400 audit(1781629894.870:694): avc: denied { map } for pid=4376 comm="syz.3.253" path="socket:[7742]" dev="sockfs" ino=7742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.322537][ T4383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'. [ 75.407530][ T4383] netlink: 3 bytes leftover after parsing attributes in process `syz.1.255'. [ 75.641996][ T4390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4390 comm=syz.1.255 [ 75.841187][ T4394] 9p: Bad value for 'rfdno' [ 76.099883][ T4339] netlink: 60 bytes leftover after parsing attributes in process `syz.4.242'. [ 76.203574][ T4400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 76.220501][ T4402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 76.241247][ T4400] netlink: 3 bytes leftover after parsing attributes in process `syz.0.260'. [ 76.252579][ T4387] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 76.254821][ T28] audit: type=1400 audit(1781629894.870:695): avc: denied { read } for pid=4376 comm="syz.3.253" path="socket:[7742]" dev="sockfs" ino=7742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.307173][ T4387] bond1 (unregistering): Released all slaves [ 76.328399][ T4407] Cannot find set identified by id 0 to match [ 76.341220][ T4402] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode active-backup(1) [ 76.353296][ T4402] bond1 (unregistering): Released all slaves [ 76.497910][ T4410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4410 comm=syz.0.260 [ 76.510575][ T4410] 9pnet_fd: Insufficient options for proto=fd [ 76.878695][ T4404] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 77.113261][ T28] audit: type=1400 audit(1781629896.730:696): avc: denied { read } for pid=4419 comm="syz.4.263" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 77.710187][ T4404] bond1 (unregistering): Released all slaves [ 78.012611][ T4427] __nla_validate_parse: 1 callbacks suppressed [ 78.012632][ T4427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 78.028529][ T4427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'. [ 78.049073][ T4432] netlink: 'syz.3.267': attribute type 10 has an invalid length. [ 78.077484][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.088054][ T4436] loop4: detected capacity change from 0 to 512 [ 78.107250][ T4436] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.120224][ T4436] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 78.144443][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.154770][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.181581][ T4436] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 78.192572][ T4436] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 78.210022][ T4432] veth0_vlan: left promiscuous mode [ 78.228618][ T4436] System zones: 0-2, 18-18, 34-35 [ 78.238133][ T4432] veth0_vlan: entered promiscuous mode [ 78.256621][ T4436] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.270712][ T4432] team0: Device veth0_vlan failed to register rx_handler [ 78.295945][ T30] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.308739][ T30] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.318188][ T4436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.269'. [ 78.327700][ T30] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.353602][ T30] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.525294][ T4461] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=4461 comm=syz.0.273 [ 78.589041][ T4461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'. [ 78.644623][ T4464] loop0: detected capacity change from 0 to 512 [ 78.721091][ T4461] FAT-fs (loop0): FAT read failed (blocknr 128) [ 78.937601][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.947548][ T4469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'. [ 79.066973][ T4476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 79.085341][ T4476] netlink: 3 bytes leftover after parsing attributes in process `syz.1.277'. [ 79.170634][ T4478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4478 comm=syz.1.277 [ 79.186286][ T4478] 9pnet_fd: Insufficient options for proto=fd [ 79.397618][ T4477] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 79.437896][ T4477] bond1 (unregistering): Released all slaves [ 79.446324][ T4483] loop0: detected capacity change from 0 to 512 [ 79.465145][ T4483] SELinux: security_context_str_to_sid () failed with errno=-22 [ 79.559855][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 79.559873][ T28] audit: type=1400 audit(1781629899.170:704): avc: denied { ioctl } for pid=4482 comm="syz.0.279" path="socket:[6985]" dev="sockfs" ino=6985 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.563032][ T4485] FAULT_INJECTION: forcing a failure. [ 79.563032][ T4485] name failslab, interval 1, probability 0, space 0, times 0 [ 79.610635][ T4485] CPU: 0 UID: 0 PID: 4485 Comm: syz.3.280 Not tainted syzkaller #0 PREEMPT(lazy) [ 79.610682][ T4485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 79.610695][ T4485] Call Trace: [ 79.610702][ T4485] [ 79.610711][ T4485] __dump_stack+0x1d/0x30 [ 79.610738][ T4485] dump_stack_lvl+0x95/0xd0 [ 79.610813][ T4485] dump_stack+0x15/0x1b [ 79.610832][ T4485] should_fail_ex+0x25e/0x270 [ 79.610862][ T4485] should_failslab+0x8c/0xb0 [ 79.610892][ T4485] kmem_cache_alloc_noprof+0x66/0x3f0 [ 79.610996][ T4485] ? alloc_empty_file+0x70/0x1e0 [ 79.611137][ T4485] alloc_empty_file+0x70/0x1e0 [ 79.611166][ T4485] path_openat+0x54/0x2000 [ 79.611257][ T4485] ? tick_program_event+0x79/0xc0 [ 79.611297][ T4485] ? __hrtimer_rearm_deferred+0x571/0x650 [ 79.611338][ T4485] ? cpu_clock_event_del+0x1a/0x30 [ 79.611459][ T4485] ? _parse_integer_limit+0x170/0x190 [ 79.611489][ T4485] do_file_open+0x16c/0x290 [ 79.611536][ T4485] do_open_execat+0xab/0x240 [ 79.611618][ T4485] alloc_bprm+0x24/0x430 [ 79.611653][ T4485] do_execveat_common+0x104/0x710 [ 79.611696][ T4485] ? do_getname+0x102/0x1c0 [ 79.611735][ T4485] __x64_sys_execve+0x5f/0x80 [ 79.611795][ T4485] x64_sys_call+0x2752/0x3020 [ 79.611885][ T4485] do_syscall_64+0x136/0x3c0 [ 79.611915][ T4485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.611944][ T4485] RIP: 0033:0x7f94843cce59 [ 79.612030][ T4485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.612105][ T4485] RSP: 002b:00007f9482e27028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 79.612193][ T4485] RAX: ffffffffffffffda RBX: 00007f9484645fa0 RCX: 00007f94843cce59 [ 79.612207][ T4485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 79.612223][ T4485] RBP: 00007f9482e27090 R08: 0000000000000000 R09: 0000000000000000 [ 79.612238][ T4485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.612250][ T4485] R13: 00007f9484646038 R14: 00007f9484645fa0 R15: 00007ffd6cec67a8 [ 79.612270][ T4485] [ 79.895849][ T4492] FAULT_INJECTION: forcing a failure. [ 79.895849][ T4492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.939787][ T4492] CPU: 1 UID: 0 PID: 4492 Comm: syz.0.283 Not tainted syzkaller #0 PREEMPT(lazy) [ 79.939875][ T4492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 79.939890][ T4492] Call Trace: [ 79.939897][ T4492] [ 79.939904][ T4492] __dump_stack+0x1d/0x30 [ 79.939931][ T4492] dump_stack_lvl+0x95/0xd0 [ 79.940015][ T4492] dump_stack+0x15/0x1b [ 79.940041][ T4492] should_fail_ex+0x25e/0x270 [ 79.940069][ T4492] should_fail+0xb/0x20 [ 79.940154][ T4492] should_fail_usercopy+0x1a/0x20 [ 79.940195][ T4492] _copy_from_user+0x1c/0xb0 [ 79.940236][ T4492] copy_from_sockptr+0x5e/0x90 [ 79.940269][ T4492] do_ip_setsockopt+0x1834/0x22f0 [ 79.940341][ T4492] ip_setsockopt+0x58/0x110 [ 79.940385][ T4492] udp_setsockopt+0x89/0xa0 [ 79.940490][ T4492] sock_common_setsockopt+0x69/0x80 [ 79.940519][ T4492] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 79.940585][ T4492] __sys_setsockopt+0x184/0x200 [ 79.940620][ T4492] __x64_sys_setsockopt+0x64/0x80 [ 79.940670][ T4492] x64_sys_call+0x2327/0x3020 [ 79.940701][ T4492] do_syscall_64+0x136/0x3c0 [ 79.940725][ T4492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.940753][ T4492] RIP: 0033:0x7f90a6eece59 [ 79.940809][ T4492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.940832][ T4492] RSP: 002b:00007f90a593f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 79.940853][ T4492] RAX: ffffffffffffffda RBX: 00007f90a7165fa0 RCX: 00007f90a6eece59 [ 79.940867][ T4492] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000003 [ 79.940879][ T4492] RBP: 00007f90a593f090 R08: 000000000000000c R09: 0000000000000000 [ 79.940892][ T4492] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 79.940946][ T4492] R13: 00007f90a7166038 R14: 00007f90a7165fa0 R15: 00007ffd56dc98e8 [ 79.940973][ T4492] [ 80.283563][ T4497] loop3: detected capacity change from 0 to 2048 [ 80.581417][ T28] audit: type=1400 audit(1781629900.200:705): avc: denied { accept } for pid=4500 comm="syz.0.286" lport=60332 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.608312][ T4502] netlink: 36 bytes leftover after parsing attributes in process `syz.0.286'. [ 80.671367][ T28] audit: type=1400 audit(1781629900.220:706): avc: denied { write } for pid=4500 comm="syz.0.286" path="socket:[7979]" dev="sockfs" ino=7979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 80.743110][ T28] audit: type=1400 audit(1781629900.220:707): avc: denied { setopt } for pid=4500 comm="syz.0.286" lport=60332 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 80.862507][ T4507] tipc: Failed to obtain node identity [ 80.937349][ T4497] GPT:first_usable_lbas don't match. [ 80.937363][ T4497] GPT:34 != 290 [ 80.937378][ T4497] GPT: Use GNU Parted to correct GPT errors. [ 80.937867][ T4497] loop3: p1 p2 p3 [ 80.952526][ T4507] tipc: Enabling of bearer rejected, failed to enable media [ 81.503893][ T4514] FAULT_INJECTION: forcing a failure. [ 81.503893][ T4514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.520958][ T4514] CPU: 0 UID: 0 PID: 4514 Comm: syz.4.289 Not tainted syzkaller #0 PREEMPT(lazy) [ 81.520993][ T4514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 81.521010][ T4514] Call Trace: [ 81.521019][ T4514] [ 81.521029][ T4514] __dump_stack+0x1d/0x30 [ 81.521060][ T4514] dump_stack_lvl+0x95/0xd0 [ 81.521102][ T4514] dump_stack+0x15/0x1b [ 81.521188][ T4514] should_fail_ex+0x25e/0x270 [ 81.521223][ T4514] should_fail+0xb/0x20 [ 81.521251][ T4514] should_fail_usercopy+0x1a/0x20 [ 81.521345][ T4514] _copy_from_user+0x1c/0xb0 [ 81.521378][ T4514] copy_from_sockptr+0x48/0x70 [ 81.521410][ T4514] ip_mroute_setsockopt+0x501/0xa00 [ 81.521502][ T4514] do_ip_setsockopt+0xd36/0x22f0 [ 81.521619][ T4514] ip_setsockopt+0x58/0x110 [ 81.521663][ T4514] raw_setsockopt+0xbb/0x140 [ 81.521696][ T4514] sock_common_setsockopt+0x69/0x80 [ 81.521727][ T4514] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 81.521777][ T4514] __sys_setsockopt+0x184/0x200 [ 81.521818][ T4514] __x64_sys_setsockopt+0x64/0x80 [ 81.521957][ T4514] x64_sys_call+0x2327/0x3020 [ 81.521990][ T4514] do_syscall_64+0x136/0x3c0 [ 81.522139][ T4514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.522169][ T4514] RIP: 0033:0x7f5821fcce59 [ 81.522188][ T4514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.522206][ T4514] RSP: 002b:00007f5820a1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 81.522250][ T4514] RAX: ffffffffffffffda RBX: 00007f5822245fa0 RCX: 00007f5821fcce59 [ 81.522309][ T4514] RDX: 00000000000000d4 RSI: 0000000000000000 RDI: 0000000000000003 [ 81.522326][ T4514] RBP: 00007f5820a1f090 R08: 0000000000000004 R09: 0000000000000000 [ 81.522343][ T4514] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 81.522361][ T4514] R13: 00007f5822246038 R14: 00007f5822245fa0 R15: 00007ffd1ef7d7a8 [ 81.522383][ T4514] [ 81.580576][ T4508] loop0: detected capacity change from 0 to 512 [ 81.851764][ T4508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.880902][ T4508] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.894729][ T4525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.292'. [ 82.122043][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.147901][ T4537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'. [ 82.374909][ T4545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4545 comm=syz.0.298 [ 82.381749][ T4542] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 82.628443][ T4545] 9pnet_fd: Insufficient options for proto=fd [ 82.868820][ T4542] bond1 (unregistering): Released all slaves [ 83.424735][ T4562] loop2: detected capacity change from 0 to 128 [ 83.441680][ T4562] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.473947][ T4562] ext4 filesystem being mounted at /55/bus/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.499404][ T28] audit: type=1400 audit(1781629903.110:708): avc: denied { write } for pid=4558 comm="syz.2.304" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.524097][ T28] audit: type=1400 audit(1781629903.140:709): avc: denied { write } for pid=4558 comm="syz.2.304" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.806038][ T4568] __nla_validate_parse: 1 callbacks suppressed [ 83.806057][ T4568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.306'. [ 83.839592][ T28] audit: type=1400 audit(1781629903.450:710): avc: denied { setopt } for pid=4567 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 83.890825][ T28] audit: type=1400 audit(1781629903.480:711): avc: denied { ioctl } for pid=4567 comm="syz.1.306" path="socket:[7151]" dev="sockfs" ino=7151 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 84.083224][ T28] audit: type=1400 audit(1781629903.480:712): avc: denied { write } for pid=4567 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 84.307493][ T4578] syzkaller0: entered promiscuous mode [ 84.313078][ T4578] syzkaller0: entered allmulticast mode [ 84.452154][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.525466][ T28] audit: type=1400 audit(1781629903.500:713): avc: denied { ioctl } for pid=4567 comm="syz.1.306" path="socket:[7152]" dev="sockfs" ino=7152 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.683692][ T4583] bond0: option min_links: invalid value (18446744073709551614) [ 84.714144][ T28] audit: type=1400 audit(1781629903.800:714): avc: denied { read } for pid=4571 comm="syz.4.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.754264][ T4589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'. [ 84.839907][ T4583] bond0: option min_links: allowed values 0 - 2147483647 [ 84.855374][ T4592] ip6erspan0: entered promiscuous mode [ 84.925663][ T4593] loop3: detected capacity change from 0 to 128 [ 85.026326][ T4597] sctp: [Deprecated]: syz.3.311 (pid 4597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 85.026326][ T4597] Use struct sctp_sack_info instead [ 85.044882][ T28] audit: type=1400 audit(1781629904.190:715): avc: denied { ioctl } for pid=4580 comm="syz.0.309" path="socket:[8210]" dev="sockfs" ino=8210 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.044939][ T28] audit: type=1400 audit(1781629904.480:716): avc: denied { create } for pid=4584 comm="syz.3.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 86.060062][ T4601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'. [ 86.114071][ T4602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'. [ 86.196275][ T28] audit: type=1400 audit(1781629905.810:717): avc: denied { write } for pid=4604 comm="syz.4.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.396720][ T4613] loop2: detected capacity change from 0 to 512 [ 86.403901][ T4613] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.418410][ T4613] EXT4-fs (loop2): orphan file too big: 4294967295 [ 86.425132][ T4613] EXT4-fs (loop2): mount failed [ 86.503152][ T4610] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 86.633404][ T4610] bond1 (unregistering): Released all slaves [ 86.810561][ T4624] loop3: detected capacity change from 0 to 512 [ 86.840002][ T4628] FAULT_INJECTION: forcing a failure. [ 86.840002][ T4628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.858514][ T4624] ext3: Unknown parameter 'nouser_xattr' [ 87.014369][ T4628] CPU: 1 UID: 0 PID: 4628 Comm: syz.4.322 Not tainted syzkaller #0 PREEMPT(lazy) [ 87.014460][ T4628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 87.014477][ T4628] Call Trace: [ 87.014485][ T4628] [ 87.014543][ T4628] __dump_stack+0x1d/0x30 [ 87.014574][ T4628] dump_stack_lvl+0x95/0xd0 [ 87.014648][ T4628] dump_stack+0x15/0x1b [ 87.014673][ T4628] should_fail_ex+0x25e/0x270 [ 87.014705][ T4628] should_fail+0xb/0x20 [ 87.014735][ T4628] should_fail_usercopy+0x1a/0x20 [ 87.014852][ T4628] _copy_from_iter+0xcc/0xe70 [ 87.014888][ T4628] ? __alloc_skb+0x511/0x6f0 [ 87.014964][ T4628] ? __alloc_skb+0x205/0x6f0 [ 87.015047][ T4628] netlink_sendmsg+0x4a4/0x6f0 [ 87.015076][ T4628] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.015101][ T4628] ____sys_sendmsg+0x532/0x580 [ 87.015156][ T4628] ___sys_sendmsg+0x195/0x1e0 [ 87.015236][ T4628] __x64_sys_sendmsg+0xd4/0x160 [ 87.015320][ T4628] x64_sys_call+0x194c/0x3020 [ 87.015350][ T4628] do_syscall_64+0x136/0x3c0 [ 87.015376][ T4628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.015406][ T4628] RIP: 0033:0x7f5821fcce59 [ 87.015451][ T4628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.015472][ T4628] RSP: 002b:00007f5820a1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.015492][ T4628] RAX: ffffffffffffffda RBX: 00007f5822245fa0 RCX: 00007f5821fcce59 [ 87.015506][ T4628] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 87.015520][ T4628] RBP: 00007f5820a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.015534][ T4628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.015551][ T4628] R13: 00007f5822246038 R14: 00007f5822245fa0 R15: 00007ffd1ef7d7a8 [ 87.015577][ T4628] [ 87.578381][ T4635] FAULT_INJECTION: forcing a failure. [ 87.578381][ T4635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.603681][ T4630] netlink: 52 bytes leftover after parsing attributes in process `syz.1.320'. [ 87.658610][ T4637] loop4: detected capacity change from 0 to 512 [ 87.665202][ T4635] CPU: 1 UID: 0 PID: 4635 Comm: syz.2.323 Not tainted syzkaller #0 PREEMPT(lazy) [ 87.665234][ T4635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 87.665281][ T4635] Call Trace: [ 87.665298][ T4635] [ 87.665305][ T4635] __dump_stack+0x1d/0x30 [ 87.665330][ T4635] dump_stack_lvl+0x95/0xd0 [ 87.665353][ T4635] dump_stack+0x15/0x1b [ 87.665379][ T4635] should_fail_ex+0x25e/0x270 [ 87.665479][ T4635] should_fail+0xb/0x20 [ 87.665501][ T4635] should_fail_usercopy+0x1a/0x20 [ 87.665539][ T4635] _copy_from_user+0x1c/0xb0 [ 87.665582][ T4635] ___sys_sendmsg+0xc1/0x1e0 [ 87.665638][ T4635] __x64_sys_sendmsg+0xd4/0x160 [ 87.665674][ T4635] x64_sys_call+0x194c/0x3020 [ 87.665726][ T4635] do_syscall_64+0x136/0x3c0 [ 87.665807][ T4635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.665897][ T4635] RIP: 0033:0x7f5cdaa9ce59 [ 87.665917][ T4635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.665942][ T4635] RSP: 002b:00007f5cd94f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.665968][ T4635] RAX: ffffffffffffffda RBX: 00007f5cdad15fa0 RCX: 00007f5cdaa9ce59 [ 87.665982][ T4635] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000009 [ 87.666025][ T4635] RBP: 00007f5cd94f7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.666037][ T4635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.666052][ T4635] R13: 00007f5cdad16038 R14: 00007f5cdad15fa0 R15: 00007ffca087f5b8 [ 87.666079][ T4635] [ 87.833729][ T4637] ext3: Unknown parameter 'nouser_xattr' [ 87.966916][ T4633] netlink: 148 bytes leftover after parsing attributes in process `syz.1.320'. [ 88.054087][ T4633] netlink: 148 bytes leftover after parsing attributes in process `syz.1.320'. [ 88.212043][ T4650] loop2: detected capacity change from 0 to 1024 [ 88.254830][ T4650] EXT4-fs: Ignoring removed i_version option [ 88.566566][ T4650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.786117][ T4659] loop3: detected capacity change from 0 to 128 [ 88.815798][ T4659] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.887617][ T4664] netlink: 'syz.4.330': attribute type 8 has an invalid length. [ 88.896276][ T4661] ipt_ECN: cannot use operation on non-tcp rule [ 88.903574][ T4659] ext4 filesystem being mounted at /60/bus/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.928978][ T28] audit: type=1400 audit(1781629908.540:718): avc: denied { write } for pid=4654 comm="syz.3.328" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.005456][ T28] audit: type=1400 audit(1781629908.570:719): avc: denied { write } for pid=4654 comm="syz.3.328" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.028134][ T4666] loop1: detected capacity change from 0 to 1024 [ 89.081682][ T4666] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.133243][ T4670] loop0: detected capacity change from 0 to 256 [ 89.143402][ T4666] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.171678][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.211969][ T4666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.291835][ T28] audit: type=1400 audit(1781629908.900:720): avc: denied { connect } for pid=4675 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.368267][ T28] audit: type=1326 audit(1781629908.930:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.1.331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dfcace59 code=0x7ffc0000 [ 89.399172][ T4677] random: crng reseeded on system resumption [ 89.449769][ T28] audit: type=1326 audit(1781629908.940:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.1.331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fe4dfcace59 code=0x7ffc0000 [ 89.509103][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.510915][ T28] audit: type=1326 audit(1781629908.940:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.1.331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dfcace59 code=0x7ffc0000 [ 89.635300][ T4682] netlink: 91 bytes leftover after parsing attributes in process `syz.2.338'. [ 89.690292][ T4672] loop0: detected capacity change from 0 to 4096 [ 89.796959][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 89.796974][ T28] audit: type=1400 audit(1781629909.380:736): avc: denied { bind } for pid=4685 comm="syz.4.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.017976][ T4672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.411869][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.597349][ T4701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.341'. [ 90.931903][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.316086][ T4716] loop3: detected capacity change from 0 to 128 [ 91.509562][ T4716] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.523303][ T4717] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 91.592227][ T4716] ext4 filesystem being mounted at /63/bus/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.656005][ T4717] bond1 (unregistering): Released all slaves [ 92.053175][ T28] audit: type=1400 audit(1781629911.670:737): avc: denied { write } for pid=4706 comm="syz.3.346" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.154347][ T28] audit: type=1400 audit(1781629911.670:738): avc: denied { write } for pid=4706 comm="syz.3.346" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.238086][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.722683][ T28] audit: type=1326 audit(1781629912.330:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.2.352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cdaa9ce59 code=0x7ffc0000 [ 93.127446][ T28] audit: type=1326 audit(1781629912.330:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.2.352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cdaa9ce59 code=0x7ffc0000 [ 93.257803][ T28] audit: type=1326 audit(1781629912.340:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.2.352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cdaa9ce59 code=0x7ffc0000 [ 93.316467][ T4754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 93.347151][ T4754] netlink: 3 bytes leftover after parsing attributes in process `syz.2.356'. [ 93.372384][ T28] audit: type=1326 audit(1781629912.340:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.2.352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5cdaa9ce59 code=0x7ffc0000 [ 93.440874][ T4756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4756 comm=syz.4.354 [ 93.446215][ T28] audit: type=1326 audit(1781629912.340:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.2.352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cdaa9ce59 code=0x7ffc0000 [ 93.493426][ T4757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4757 comm=syz.2.356 [ 93.510118][ T28] audit: type=1326 audit(1781629912.370:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.2.352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cdaa9ce59 code=0x7ffc0000 [ 93.541558][ T4755] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 93.557458][ T28] audit: type=1326 audit(1781629912.370:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.2.352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5cdaa9ce59 code=0x7ffc0000 [ 93.621112][ T4755] bond1 (unregistering): Released all slaves [ 93.783119][ T4762] loop3: detected capacity change from 0 to 8192 [ 93.801497][ T4767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 93.834208][ T4762] loop3: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 93.851709][ T4771] FAULT_INJECTION: forcing a failure. [ 93.851709][ T4771] name failslab, interval 1, probability 0, space 0, times 0 [ 93.962756][ T4771] CPU: 0 UID: 0 PID: 4771 Comm: syz.1.360 Not tainted syzkaller #0 PREEMPT(lazy) [ 93.962788][ T4771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 93.962805][ T4771] Call Trace: [ 93.962813][ T4771] [ 93.962877][ T4771] __dump_stack+0x1d/0x30 [ 93.962908][ T4771] dump_stack_lvl+0x95/0xd0 [ 93.962994][ T4771] dump_stack+0x15/0x1b [ 93.963019][ T4771] should_fail_ex+0x25e/0x270 [ 93.963054][ T4771] should_failslab+0x8c/0xb0 [ 93.963143][ T4771] kmem_cache_alloc_noprof+0x66/0x3f0 [ 93.963284][ T4771] ? create_new_namespaces+0x38/0x420 [ 93.963330][ T4771] create_new_namespaces+0x38/0x420 [ 93.963412][ T4771] unshare_nsproxy_namespaces+0x115/0x150 [ 93.963493][ T4771] ksys_unshare+0x411/0x760 [ 93.963595][ T4771] __x64_sys_unshare+0x1f/0x30 [ 93.963621][ T4771] x64_sys_call+0x1cef/0x3020 [ 93.963723][ T4771] do_syscall_64+0x136/0x3c0 [ 93.963754][ T4771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.963817][ T4771] RIP: 0033:0x7fe4dfcace59 [ 93.963838][ T4771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.963867][ T4771] RSP: 002b:00007fe4de6e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 93.963894][ T4771] RAX: ffffffffffffffda RBX: 00007fe4dff26090 RCX: 00007fe4dfcace59 [ 93.963969][ T4771] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026020480 [ 93.963986][ T4771] RBP: 00007fe4de6e6090 R08: 0000000000000000 R09: 0000000000000000 [ 93.964063][ T4771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.964079][ T4771] R13: 00007fe4dff26128 R14: 00007fe4dff26090 R15: 00007ffe418ac308 [ 93.964105][ T4771] [ 94.174407][ T4769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.361'. [ 94.288264][ T4769] team1: entered promiscuous mode [ 94.312978][ T4769] team1: entered allmulticast mode [ 94.352523][ T4769] 8021q: adding VLAN 0 to HW filter on device team1 [ 94.609244][ T4778] loop1: detected capacity change from 0 to 512 [ 94.638440][ T4778] EXT4-fs: dax option not supported [ 94.880877][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 94.880893][ T28] audit: type=1400 audit(1781629914.480:750): avc: denied { connect } for pid=4780 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.047461][ T4783] C: renamed from veth1_to_team [ 95.108132][ T4762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=4762 comm=syz.3.358 [ 95.126005][ T28] audit: type=1400 audit(1781629914.490:751): avc: denied { getopt } for pid=4780 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.222000][ T4783] netlink: 'syz.0.363': attribute type 3 has an invalid length. [ 95.231073][ T28] audit: type=1400 audit(1781629914.660:752): avc: denied { lock } for pid=4781 comm="syz.0.363" path="socket:[9337]" dev="sockfs" ino=9337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 95.269602][ T4787] loop2: detected capacity change from 0 to 8192 [ 95.283505][ T4783] netlink: 152 bytes leftover after parsing attributes in process `syz.0.363'. [ 95.332452][ T4783] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 95.652238][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 95.662589][ T3786] udevd[3786]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 96.121935][ T4801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 96.132645][ T4801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.367'. [ 96.199907][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 96.306779][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 96.341465][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 96.502013][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop3p17, 10) failed: No such file or directory [ 96.525365][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p15, 10) failed: No such file or directory [ 96.539543][ T3786] udevd[3786]: inotify_add_watch(7, /dev/loop3p14, 10) failed: No such file or directory [ 96.553240][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory [ 96.642332][ T4802] udevd[4802]: inotify_add_watch(7, /dev/loop3p8, 10) failed: No such file or directory [ 96.719390][ T4809] loop2: detected capacity change from 0 to 512 [ 96.778709][ T4819] netlink: 36 bytes leftover after parsing attributes in process `syz.1.374'. [ 96.971540][ T4830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 97.072326][ T28] audit: type=1400 audit(1781629916.690:753): avc: denied { mounton } for pid=4824 comm="syz.4.376" path="/proc/254/task" dev="proc" ino=9458 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 97.112051][ T4840] loop1: detected capacity change from 0 to 256 [ 97.127847][ T4840] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.150672][ T4840] FAT-fs (loop1): error, clusters badly computed (0 != 1025) [ 97.218286][ T4840] FAT-fs (loop1): Filesystem has been set read-only [ 97.235658][ T4840] FAT-fs (loop1): error, clusters badly computed (1 != 1026) [ 97.302595][ T4809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.337612][ T28] audit: type=1400 audit(1781629916.950:754): avc: denied { wake_alarm } for pid=4831 comm="syz.1.378" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 97.363402][ T4809] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.379933][ T4845] loop0: detected capacity change from 0 to 256 [ 97.388462][ T28] audit: type=1400 audit(1781629916.980:755): avc: denied { mount } for pid=4848 comm="syz.4.381" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 97.498850][ T28] audit: type=1326 audit(1781629917.110:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.2.370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cdaa9ce59 code=0x7ffc0000 [ 97.623497][ T4851] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 97.641847][ T28] audit: type=1326 audit(1781629917.110:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.2.370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cdaa9ce59 code=0x7ffc0000 [ 97.680180][ T4851] bond1 (unregistering): Released all slaves [ 97.693105][ T28] audit: type=1326 audit(1781629917.110:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.2.370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cdaa9ce59 code=0x7ffc0000 [ 97.720934][ T28] audit: type=1326 audit(1781629917.110:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.2.370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5cdaa9ce59 code=0x7ffc0000 [ 97.771070][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.834178][ T4856] loop0: detected capacity change from 0 to 512 [ 97.862876][ T4856] EXT4-fs: Ignoring removed nobh option [ 97.886014][ T4856] EXT4-fs: Mount option(s) incompatible with ext3 [ 97.985155][ T4860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 97.995646][ T4860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.382'. [ 98.110169][ T4856] loop0: detected capacity change from 0 to 2048 [ 98.628634][ T4872] FAULT_INJECTION: forcing a failure. [ 98.628634][ T4872] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 98.642221][ T4872] CPU: 0 UID: 0 PID: 4872 Comm: syz.1.387 Not tainted syzkaller #0 PREEMPT(lazy) [ 98.642257][ T4872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 98.642341][ T4872] Call Trace: [ 98.642349][ T4872] [ 98.642440][ T4872] __dump_stack+0x1d/0x30 [ 98.642466][ T4872] dump_stack_lvl+0x95/0xd0 [ 98.642487][ T4872] dump_stack+0x15/0x1b [ 98.642505][ T4872] should_fail_ex+0x25e/0x270 [ 98.642535][ T4872] should_fail_alloc_page+0xf2/0x100 [ 98.642644][ T4872] __alloc_frozen_pages_noprof+0x108/0x350 [ 98.642686][ T4872] alloc_pages_mpol+0xa9/0x1d0 [ 98.642717][ T4872] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 98.642799][ T4872] do_wp_page+0x6f6/0x2030 [ 98.642837][ T4872] ? __rcu_read_lock+0x36/0x50 [ 98.642955][ T4872] handle_mm_fault+0x8bc/0x2da0 [ 98.643046][ T4872] do_user_addr_fault+0x402/0x1060 [ 98.643141][ T4872] exc_page_fault+0x62/0xa0 [ 98.643250][ T4872] asm_exc_page_fault+0x26/0x30 [ 98.643278][ T4872] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 98.643312][ T4872] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 98.643381][ T4872] RSP: 0018:ffffc900015179d0 EFLAGS: 00050206 [ 98.643398][ T4872] RAX: ffff888104a03e30 RBX: ffffc90001517e88 RCX: 00000000000000a3 [ 98.643411][ T4872] RDX: 0000000000000000 RSI: ffff88811ba22000 RDI: 0000200000002700 [ 98.643425][ T4872] RBP: 0000000000000000 R08: 00000000000003cc R09: 0000000000000000 [ 98.643440][ T4872] R10: 000188811ba22000 R11: 000188811ba220a2 R12: ffffc90001517e70 [ 98.643460][ T4872] R13: 00000000000000a3 R14: 0000000000000e5c R15: 00000000000000a3 [ 98.643517][ T4872] _copy_to_iter+0x2d4/0xea0 [ 98.643558][ T4872] ? should_failslab+0x8c/0xb0 [ 98.643630][ T4872] ? __rcu_read_unlock+0x4e/0x70 [ 98.643663][ T4872] ? __skb_try_recv_from_queue+0x3d6/0x440 [ 98.643706][ T4872] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 98.643804][ T4872] __skb_datagram_iter+0xc6/0x680 [ 98.643873][ T4872] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 98.643918][ T4872] skb_copy_datagram_iter+0x3f/0xf0 [ 98.643972][ T4872] netlink_recvmsg+0x1a8/0x550 [ 98.644080][ T4872] ? __pfx_netlink_recvmsg+0x10/0x10 [ 98.644213][ T4872] sock_recvmsg+0xf5/0x120 [ 98.644238][ T4872] ____sys_recvmsg+0xf5/0x280 [ 98.644290][ T4872] ___sys_recvmsg+0x11f/0x3a0 [ 98.644346][ T4872] __x64_sys_recvmsg+0xd1/0x160 [ 98.644394][ T4872] x64_sys_call+0x2b1a/0x3020 [ 98.644424][ T4872] do_syscall_64+0x136/0x3c0 [ 98.644497][ T4872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.644528][ T4872] RIP: 0033:0x7fe4dfcace59 [ 98.644596][ T4872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.644621][ T4872] RSP: 002b:00007fe4de707028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 98.644675][ T4872] RAX: ffffffffffffffda RBX: 00007fe4dff25fa0 RCX: 00007fe4dfcace59 [ 98.644695][ T4872] RDX: 0000000040000100 RSI: 0000200000003b40 RDI: 0000000000000003 [ 98.644709][ T4872] RBP: 00007fe4de707090 R08: 0000000000000000 R09: 0000000000000000 [ 98.644721][ T4872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.644734][ T4872] R13: 00007fe4dff26038 R14: 00007fe4dff25fa0 R15: 00007ffe418ac308 [ 98.644800][ T4872] [ 99.085002][ T4878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'. [ 99.115291][ T4878] netlink: 3 bytes leftover after parsing attributes in process `syz.1.389'. [ 99.141897][ T4882] loop0: detected capacity change from 0 to 128 [ 99.149965][ T4885] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20000 [ 99.157893][ T4886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.391'. [ 99.191296][ T4882] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.205948][ T4889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4889 comm=syz.1.389 [ 99.240459][ T4882] ext4 filesystem being mounted at /75/bus/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.318316][ T4883] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 99.329315][ T4883] bond1 (unregistering): Released all slaves [ 99.454497][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.466052][ T4902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.475763][ T4902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.508953][ T4906] loop0: detected capacity change from 0 to 512 [ 99.513638][ T4907] loop4: detected capacity change from 0 to 1024 [ 99.522307][ T4906] ext3: Unknown parameter 'nouser_xattr' [ 99.608473][ T4907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 99.634332][ T4907] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.724596][ T12] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 6) [ 99.770991][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 99.787492][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 99.787492][ T12] [ 99.869851][ T12] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 99.961971][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 100.046211][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 100.046211][ T12] [ 100.326759][ T4829] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 100.395643][ T4907] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.397: bg 0: block 112: padding at end of block bitmap is not set [ 100.433756][ T4907] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 117 [ 100.455354][ T4940] netlink: 'syz.1.400': attribute type 5 has an invalid length. [ 100.471442][ T4907] EXT4-fs (loop4): This should not happen!! Data will be lost [ 100.471442][ T4907] [ 100.503224][ T4939] loop1: detected capacity change from 0 to 512 [ 100.514315][ T4946] loop0: detected capacity change from 0 to 1024 [ 100.521396][ T4941] netlink: 64 bytes leftover after parsing attributes in process `syz.1.400'. [ 100.524003][ T4939] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.540918][ T4946] EXT4-fs: Ignoring removed i_version option [ 100.550152][ T4939] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 100.550189][ T4939] EXT4-fs: failed to create workqueue [ 100.576610][ T4946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.590707][ T4939] EXT4-fs (loop1): mount failed [ 100.607813][ T107] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4112 with max blocks 1804 with error 28 [ 100.628984][ T107] EXT4-fs (loop4): This should not happen!! Data will be lost [ 100.628984][ T107] [ 100.639484][ T107] EXT4-fs (loop4): Total free blocks count 0 [ 100.660036][ T3304] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 100.745059][ T4955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.404'. [ 100.777486][ T4955] netlink: 3 bytes leftover after parsing attributes in process `syz.3.404'. [ 100.794197][ T4963] ipt_ECN: cannot use operation on non-tcp rule [ 100.802995][ T4960] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 100.816827][ T4960] bond1 (unregistering): Released all slaves [ 100.848693][ T4967] loop4: detected capacity change from 0 to 512 [ 100.868324][ T4967] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 100.887894][ T4967] EXT4-fs error (device loop4): __ext4_iget:5481: inode #11: block 2: comm syz.4.403: invalid block [ 100.979490][ T4970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4970 comm=syz.3.404 [ 100.995675][ T4967] fserror_report: 2 callbacks suppressed [ 100.995689][ T4967] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 101.002735][ T4967] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.403: couldn't read orphan inode 11 (err -117) [ 101.011973][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 101.012004][ C0] EXT4-fs (loop4): initial error at time 1781629920: __ext4_iget:5481: inode 11: block 2 [ 101.012047][ C0] EXT4-fs (loop4): last error at time 1781629920: __ext4_iget:5481: inode 11: block 2 [ 101.064602][ T4967] loop4: lost filesystem error report for type 5 error -117 [ 101.065530][ T4967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.092695][ T4968] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 101.103976][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 101.103994][ T28] audit: type=1400 audit(1781629920.720:831): avc: denied { write } for pid=4958 comm="syz.4.403" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.132448][ T4967] Invalid ELF header magic: != ELF [ 101.138362][ T28] audit: type=1400 audit(1781629920.750:832): avc: denied { module_load } for pid=4958 comm="syz.4.403" path="/86/bus/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=system permissive=1 [ 101.162012][ T4968] bond1 (unregistering): Released all slaves [ 101.555991][ T28] audit: type=1400 audit(1781629921.170:833): avc: denied { create } for pid=4974 comm="syz.1.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 101.578681][ T4977] ================================================================== [ 101.586896][ T4977] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 101.594643][ T4977] [ 101.596985][ T4977] write to 0xffff8881039bc300 of 8 bytes by task 4974 on cpu 0: [ 101.604618][ T4977] mas_wr_store_entry+0x3b95/0x5a90 [ 101.609830][ T4977] mas_store_prealloc+0x421/0x670 [ 101.614866][ T4977] vma_complete+0x3c7/0x850 [ 101.619385][ T4977] __split_vma+0x592/0x640 [ 101.623820][ T4977] vma_modify+0xb29/0xc80 [ 101.628166][ T4977] vma_modify_flags+0x182/0x210 [ 101.633036][ T4977] mprotect_fixup+0x3a2/0x680 [ 101.637767][ T4977] do_mprotect_pkey+0x69e/0x950 [ 101.642625][ T4977] __x64_sys_mprotect+0x48/0x60 [ 101.647495][ T4977] x64_sys_call+0x2768/0x3020 [ 101.652183][ T4977] do_syscall_64+0x136/0x3c0 [ 101.656790][ T4977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.662703][ T4977] [ 101.665058][ T4977] read to 0xffff8881039bc300 of 8 bytes by task 4977 on cpu 1: [ 101.672605][ T4977] mtree_range_walk+0x35a/0x480 [ 101.677469][ T4977] mas_walk+0x1ac/0x340 [ 101.681629][ T4977] lock_vma_under_rcu+0xc9/0x210 [ 101.686584][ T4977] do_user_addr_fault+0x237/0x1060 [ 101.691726][ T4977] exc_page_fault+0x62/0xa0 [ 101.696253][ T4977] asm_exc_page_fault+0x26/0x30 [ 101.701129][ T4977] [ 101.703487][ T4977] value changed: 0xffff8881039bc60e -> 0xffff8881039bc300 [ 101.710600][ T4977] [ 101.712948][ T4977] Reported by Kernel Concurrency Sanitizer on: [ 101.719097][ T4977] CPU: 1 UID: 0 PID: 4977 Comm: syz.1.406 Not tainted syzkaller #0 PREEMPT(lazy) [ 101.728300][ T4977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 101.738364][ T4977] ================================================================== [ 103.073460][ T4930] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.114047][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.117336][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.