last executing test programs: 3.466470196s ago: executing program 2 (id=596): perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xa, 0x510, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$binfmt_elf64(r0, 0x0, 0x60) getpeername$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) unshare(0x24020400) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000100000100000028000000", @ANYRES32], 0x50) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) 3.247126223s ago: executing program 0 (id=603): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000320000000000000000000de7000000000000000000000000000000000000000000000000000000001d0000000000000000000000b3dfb4fb00000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b"], 0x23c}}, 0x0) 3.246533973s ago: executing program 0 (id=604): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) r1 = dup(r0) recvfrom(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xac48, 0x20, 0x0, 0x1f5, 0x0, r1}, &(0x7f00000000c0), 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x6f6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{0x0}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000084000000008777d6b279000000440473"], 0x40}, 0x0) 3.245159853s ago: executing program 1 (id=605): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x2}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (fail_nth: 11) 3.232655244s ago: executing program 2 (id=606): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x3, 0x1, 0x800077, 0x8, 0x2, 0x6, 0x0, 0xf67, 0x8}) (fail_nth: 6) 2.699271162s ago: executing program 1 (id=607): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be", 0x1}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000001000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000084"], 0x40}, 0x0) 2.635190313s ago: executing program 1 (id=608): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x57a, &(0x7f0000001500)="$eJzs3c9rG8ceAPDvylZ+v2cHQnjv8SiGHpqSRo7t/kihh/TchgbaeypsxQTLUbDkELuBJofmXEIvpYHSe+m5x9B/oIf+DYE2kJZg2kOhqKy8K/+SLSdRbKX6fGDNfHdXmh3NznhGI6EABtZY+qcQ8d+I+DyJGImIJDs2HNnBsdXzVh7fnE63JJrND39LWuelcf5c+eOOZsF/IuKHzyJOF7bmW19anitXq5WFLB5vzF8bry8tn7kyX56tzFauTk5NnXtjavLtt97sWVlfvfjHlx/cH8qi43eTOB/Hsmh9OZ7BrfXBWIxlr0kxzm86caIHmfWTpOPe7/b8OngyQ1k7L0baB4zEUNbqgX++TyOiCQyo5Inb/0/F53MlwN7KxwH53L5H8+AXxqN3VydAW8s/vPreSBxqzY2OrCQbZkbpfHe0B/mneXz/y7276Ra9ex8CoKtbtyPi7PDw1v4vyfq/1K8jT/PcZ3dxztimWP8He+d+Ov55rdP4p9Ae/0SH8c/RDm33aXRv/4WHPchmW+n4752O49/2otXoUBb9qzXmKyaXr1Qrad/274g4FcWDabzTes65lQfNDrub+UpUPv5LtzT/fCyYXcfD4YMbHzhTbpSfqdDrPLod8b+O49+kXf9Jh/pPX4+Lu8zjZOXeS9sdG+ta/uer+U3EKx3rf21FK9l5fXK8dT+M53fFVr/fOfnjdvnvd/nT+j+yc/lHk/XrtfUnz+PrQ39Wor2evNGG8sfu7/8DyUet9IFs341yo7EwEXEgeb+9v5Dvn1x7bB7n56flP/Xyzv1fp/v/cER8vMvy3znx7f+3O9YP9T/Tsf7bs9tN9f9X9s7B2p5uiQfvffLVdvl3L39a/6+3UqeyPbvp/3ZzXU93NwMAAAAAAED/KkTEsUgKpXa6UCiVVj/fcSKOFKq1euP05dri1ZlofVd2NIqFfKV7ZN3nISayFcM8ntwUT0XE8Yj4YuhwKy5N16oz+114AAAAAAAAAAAAAAAAAAAA6BNHt/n+f+rnof2+OuC585PfMLi6tv9e/NIT0Jf8/4fBpf3D4NL+YXBp/zC4tH8YXNo/DC7tHwaX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9dfHChXRrrjy+OZ3GM9eXFudq18/MVOpzpfnF6dJ0beFaabZWm61WStO1+W7PV63Vrk1MxuKN8Ual3hivLy1fmq8tXm1cujJfnq1cqhT3pFQAAAAAAAAAAAAAAAAAAADwYqkvLc+Vq9XKgsSGxKH+uIwXIDHcH5ch0ePEfvdMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDm7wAAAP//OT049w==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x194) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000004c0)=""/232, 0xe8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef80"], 0xfe33) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) r6 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001a80)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8983, &(0x7f0000001a80)={0x6, 'tunl0\x00', {0x1}, 0x869}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000001ac0)={0x0, 'team0\x00', {0x4}, 0x5}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r10}, 0x10, &(0x7f00000005c0)={&(0x7f0000000900)=@can={{0x4, 0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "b9eca8b952f7a664"}, 0x10}}, 0x0) writev(r7, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x1}], 0x2) ftruncate(r6, 0x2007ffb) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8001, 0x5, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.335137733s ago: executing program 2 (id=609): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x6, 0x2) preadv(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f0000000c40)=""/261, 0x105}], 0x1, 0x8, 0x6) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000480), 0x8, 0x4c50) sendto$packet(r0, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x6e) 2.329694064s ago: executing program 0 (id=611): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x57a, &(0x7f0000001500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x194) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0xa9e, 0x0, 0xfffffffffffffffc, 0x100000000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000004c0)=""/232, 0xe8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef80"], 0xfe33) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) r6 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001a80)="$eJzs3U1oHNcdAPD/zGot2ZYrF1poiw+mLbhgvPqw3bo9yddSg8GHQi+tWK2F0UprtKvWEoLKdxPiQ0iCL84tOeSYkEMOIZccc80lH+eAiUUClg/Jhv2SZXnlrGTtbqz9/WC0783M7v//duY9zQwzbAAD63TtTxrx24i4mkSMbVs2FM2FpxvrbW6s5R9vrOWTqFavfZNEEhGPNtbyrfWT5uvxiFiPiN9ExMfZiLPp1kceaRXKK6vzM8ViYalZH68s3Bwvr6yeu7EwM1eYKyye/8tfL166cHFyanJ7uo+r22vZvbX1zhd3X7nz6d/v333n3VPr+ddmkpiO0eay7e04SI3vJBvTO+Zf6EawPkr6nQD7kmn281pX+nWMRabZ69upbh8chnuSHtBF1eGI6pZtRWAAJC/Q6VuDCPAyah0H1M5/W1Mvjz8eXG6cgNTibm6s5f8frfhDjWsTMVI/Nzn2bfLUmUntfPNkLxPlUFq/HRETQ0PP7v9Jc//bv4mDSJCu+uhyY0M9u/3TrfEn2ow/o61rpy+oNf5tNse/zTbxM7uMf1c7jPH9v756c9f4t4fjd23jJ1vxkzbx04j4T4fx7/3zg0u7Lau+FXEm2sdvSZ5/fXj8+o1iYaLxt22MD8+c+tvu7Y84tkv8xjXbkXoi29t/pJlT2mH73//kvd+vPyf+n/7w/O3f7vs/GhGvdhj/l4/e/sduyx7cTh7WjgL2uv2TyMb9DuP/efr0582iq4YAAAAAAAAAAHCA0vq9bEma2yqnaS7XeIb3V3EsLZbKlbPXS8uLs4173k5GNm3daTXWqCe1+mTzftxWfWpH/XymGTBztF7P5UvF2T63HQAAAAAAAAAAAAAAAAAAAH4uju94/v+7TP35/+mIqRP9zg3ogd1/8hs47PR/GFxP9/+kb3kAvef/Pwysqv4Pg0v/h8Gl/8Pg0v9hcLXt/0d7nwfQe8/0/5H+5AH0nuN/AAAAAAAAAAAAAAAAAAAAAAAAAADoiqtXrtSm6uONtXytPju0sjxf+u+52UJ5PrewnM/lS0s3c3Ol0lyxkMuXFn7q85JS6eZELC7fGq8UypXx8srqvxdKy4ut3xQtZLveIgAAAAAAAAAAAAAAAAAAAHj5jNanJM1FZBv1NM3lIk5ExMkkkus3ioWJiPhFRHyWyQ7X6pP9ThoAAAAAAAAAAAAAAAAAAAAOmfLK6vxMsVhY6l5hqBmqs3d9WelqPkN7WTki1g82jdon7vld2eYXWJ8z0vXtdbgLmQ73w4Ev9HFQAgAAAAAAAAAAAAAAAACAAfXkod9O3/FDdxMCAAAAAAAAAAAAAAAAAACAgZR+nUREbToz9sfRnUuPJJuZ+mtE/O/etddvzVQqS5O1+Q+35lfeaM6f6kf+QKda/TSNiFo/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4or6zOzxSLhaV9FoY7WKffbQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYjx8DAAD//95Mx5c=") r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8983, &(0x7f0000001a80)={0x6, 'tunl0\x00', {0x1}, 0x869}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000001ac0)={0x0, 'team0\x00', {0x4}, 0x5}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r10}, 0x10, &(0x7f00000005c0)={&(0x7f0000000900)=@can={{0x4, 0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "b9eca8b952f7a664"}, 0x10}}, 0x0) writev(r7, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x1}], 0x2) ftruncate(r6, 0x2007ffb) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8001, 0x5, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.883211858s ago: executing program 3 (id=616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x400000, 0x20) add_key(&(0x7f00000003c0)='.dead\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700020000006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) unshare(0x6c040000) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r8, &(0x7f0000003140)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) getpgid(r9) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000408010200"/28], 0x1c}}, 0x4) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 1.850899009s ago: executing program 1 (id=617): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c200000008004500005c0000000000119078dd000000ffffffff00004e20004890780300000004000000565b7e6e99f0b01d76bb174f88f619f201fb812dce2d5faef18648bdba36c54575ac218d70aae08429740488953f7be8f1b3278626feaa09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}}]}, 0x30}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.609493297s ago: executing program 2 (id=618): unshare(0x24040400) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x2008040) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) unshare(0x68040200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40440c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1.407940943s ago: executing program 0 (id=619): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="151700000700000008000a00", @ANYRES32=r1, @ANYBLOB="140012800c0001006d616376746170000200028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) 1.305919157s ago: executing program 1 (id=620): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000240)='fuse\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@mpls_getroute={0x164, 0x1a, 0x400, 0x70bd28, 0x25dfdbff, {0x1c, 0x0, 0x10, 0x1, 0xfd, 0x2, 0xfd, 0x6}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xb4}, @RTA_NEWDST={0x84, 0x13, [{0x8}, {0x3, 0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xfff}, {0xd6e, 0x0, 0x1}, {0x4}, {0x81}, {0x8}, {0x3, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x3}, {0x7}, {0x8}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xb942}, {0x4}, {0x6, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xa, 0x0, 0x1}, {}, {0xfffff}, {0xf, 0x0, 0x1}, {0x3, 0x0, 0x1}, {}, {0xd, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0xffffc, 0x0, 0x1}}, @RTA_VIA={0x14, 0x12, {0x2a, "db2fda1010b2db5a8b76d6eb2bab"}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x8}, @RTA_NEWDST={0x84, 0x13, [{0x4}, {0x5, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x3}, {0x1c3, 0x0, 0x1}, {0x400}, {0x7fff}, {0x9}, {0x38b}, {0x2, 0x0, 0x1}, {}, {0x4}, {0x2, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x1ff, 0x0, 0x1}, {0x1f}, {0xb, 0x0, 0x1}, {0xffff}, {0xffff, 0x0, 0x1}, {0x9}, {0x2, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x6}, {0x9}, {0x1, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1ff}, {0x1, 0x0, 0x1}, {0x7}, {0x5, 0x0, 0x1}, {0xffff0, 0x0, 0x1}]}, @RTA_VIA={0x14, 0x12, {0x25, "4de721eee4c913528d2ba5b7d845"}}]}, 0x164}, 0x1, 0x0, 0x0, 0x80}, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x2) fchdir(r3) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0x9362, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0xa0880, 0x0) fremovexattr(r5, &(0x7f0000000300)=@known='user.incfs.size\x00') r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) r8 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r8, 0x29, 0x19, 0x0, &(0x7f0000000040)) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0008000f0002006e657464657673696d30000008008c0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) connect$pppl2tp(r9, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r10, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x5}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbb99bbbb86dd6001010000161101fe8000000000000000000000000080bbfe8000000000000000000000000000aa00000e22001690780203000000000040000000000000"], 0x0) clock_nanosleep(0xb, 0x1, &(0x7f00000000c0)={0x77359400}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e24, @private=0xa010100}, @in6={0xa, 0x4e20, 0xe9aa, @loopback, 0x9}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e24, @multicast2}], 0x4c) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="1c0013c50000000061d061a22881000000000800000013bc5aa3322cee1ed1ea0bd3346cc10c54a67944c0a442fe1a9d49b2262e31e3f5bbb9bd988de883befa7f6dbbd7109266509fd24d4b8e1a42b88187a8b3ead1c9f33eb5fdce9dcc32442aa4ccf08532809ac5d9c771c32e59ce59fe7403f833c1633895a93bba4ad1360a5691c452053392ade7020cbc769329e8da41", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000084"], 0x40}, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r13) quotactl_fd$Q_SYNC(r5, 0xffffffff80000101, 0x0, 0x0) 1.266834278s ago: executing program 4 (id=622): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be", 0x1}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000006000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000084"], 0x40}, 0x0) 1.112894393s ago: executing program 4 (id=623): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) (async) listen(r0, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f00000001c0)) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x1005, 0xfffffffffffffffe) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) r3 = socket(0x10, 0x803, 0x0) (async) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000000)={0x3a, @dev={0xac, 0x14, 0x14, 0x35}, 0x4e23, 0x2, 'nq\x00', 0x24, 0x9, 0x55}, 0x2c) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0000080900010073797a31000000002400048020000180070001006374000014000280080002400000000d080001400d0000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newtclass={0x54, 0x28, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xb}, {0xe, 0xa}, {0x6, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x6}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x5}}}, @tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x200000d4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0003001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000f70"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.111521264s ago: executing program 2 (id=624): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x2000, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) 1.108974523s ago: executing program 0 (id=625): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071102800000000001d400500000000004704000001ed00000f030000000000006f44000000000000730a00fe000000007203000000000006b500f3ffffff00009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xe000000}, 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) pipe2$9p(0x0, 0x84800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x800) 899.2188ms ago: executing program 4 (id=626): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x54, r6, 0x1, 0x0, 0x0, {0x53}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6}, {0x5}}]}, 0x54}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f000000c640)={0x0, 0x0, &(0x7f000000c600)={&(0x7f00000007c0)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf}, [@FRA_SRC={0x8, 0x2, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x40841}, 0x40080c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@union={0x4, 0x1, 0x0, 0x5, 0x0, 0x8, [{0x1, 0x3, 0x80000001}]}]}, {0x0, [0x2e, 0x659a0ff34001bc7e, 0x61, 0x2e]}}, 0x0, 0x36, 0x0, 0x1, 0xd96b}, 0x28) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x1000) r10 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f5, &(0x7f0000001340)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r11, 0xffffffff80000102, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r12, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) ioctl$TCSBRKP(r7, 0x5425, 0x8) 796.334493ms ago: executing program 3 (id=627): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8100, 0x6, 0x8000, 0x6, 0x0, 0x2}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_delrule={0x24, 0x21, 0x105, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000177000/0x4000)=nil, 0x4000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) 742.140476ms ago: executing program 3 (id=628): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x6, 0x2) preadv(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f0000000c40)=""/261, 0x105}], 0x1, 0x8, 0x6) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000480), 0x8, 0x4c50) sendto$packet(r0, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x6e) 454.544285ms ago: executing program 3 (id=629): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f00000000c0)={[{@nomblk_io_submit}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$eJzs3ctrW9kZAPDvyvKjTlK7UGjSlaHQGoLlOnWTFrpI6aIUGgi06yZCVkxq2QqWHGJjSEMpdFNoQxeFdpN12qa7btuZ7cy/MLMZhiEhM+OESZjF4OHqEcu25MgZWZqJfz+49jn3oXO++zj3yPdwHcCxNZX+yESciYg/JxETjflJRAzXUtmIi/X1nm1tFtIpie3tX32U1NZ5urVZiJZtYnw8TjQypyPijT9EnM3sL7eyvrGUL5WKq438bHX5xmxlfWPm+nJ+sbhYXDk/Nz9/7sIPL4z2LtZP3t44+egvP//evy9++vtvPfjTm0lcjJONZa1x9MpUTNX3SQynu3CXn/W6sAFLBl0BXkl6aQ7Vr/I4ExPZGOl+2+xRVgwAODK3I2IbADhmEvd/ADhmmn8HeLq1WUin7duD/XtEvz3+aUSM1eNvPt+sL8k2ntmN1Z6Djj9Ndj3vSCJisgflT0XEP/77m3+mUxzRc0iAdn53JyKuTk412/+d9ifZN2ahrvsBGd9vJg4YHDC1J6/9g/75X9r/+dFO/2/n+su86P9Em/7PaJtr91VMxe4RJ/uv/8zDHhTTUdr/+8nwzti2Zy3xN0wONXKnan2+4eTa9VIxbdu+HhHTMTya5ufaf3xteNn0k8+e7JrbEnFr/+/ju7+9n5af/t5ZI/Mwu6fJXchX872IPfX4TsS3s+3iT14c/6RD//dyl2X84sd//HunZWn8abzNaXf8Rz+qbPtexHejffxNyUHjE8/P1k6H2eZJ0cZ/3vvbeKfyW49/OqXl178LnOp9sG2kx3/84Pgnk9bxmpXDl/HWvYn/d1rWOf6m9uf/SPLrWrp5Kd3KV6urcxEjyS/3zz+3s20z31w/jX/6O+2v/4PO//Q74dUu488++vBfL42/OWNf/A1jXRZ2SGn8C4c6/m0T6VfhDovypQfPloY6ld/d8Z9PE0PTjTndtH8da5ovlUZa1nnlHQcAAAAAAAAAAAAAAAAAAAAAAAAAh5CpvaQ0yeRepDOZXC5q/8P7mzGeKZUr1bPXymsrC/WXmU7G8GhE1F51OdHyPtS5xvvwm/lze/I/iIhvRMRfR79Wy+cK5dLCoIMHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIYTHf7/f+qD0frv5wOtIQBwJMZeusaTYl8qAgD0zcvv/xExevT1AAD6p6v7PwDwWnH/B4DjZywz6BoAAP02FpEddB0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4rV2+dCmdtp9vbRbS/MLN9bWl8s2ZhWJlKbe8VsgVyqs3covl8mKpmCuUl1s2fafd55XK5RvzsbJ2a7ZarFRnK+sbV5bLayvVK9eX84vFK8XhvkUGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN2rrG8s5Uul4mojcX88YvecPiWGGhXq5SfPnOx3FP1IbE/U99SXpT49T4ztnfP+zLunD9rq7r7TWOILJwbZKgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8dXweAAD//9GqGUs=") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_clone3(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_matches\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) utimes(0x0, 0x0) r1 = creat(&(0x7f0000000200)='./file1\x00', 0x145) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x20052f8, 0xfffffff8, 0x100802, 0x2, 0x8}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x13) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r6, &(0x7f0000004100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x200080fc) 442.022425ms ago: executing program 1 (id=630): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x48) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_config_ext={0x292ca90c, 0xffffffffffffb2eb}, 0x119b10, 0x1, 0xe, 0x9, 0x8, 0x6, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1d01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$packet(0x2d, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f0000000880), &(0x7f00000008c0)=r5}, 0x20) listen(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000080)=@tcp}, 0x20) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r3) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10) 395.880307ms ago: executing program 4 (id=631): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xd}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0xfffffffffffffffc, 0x200000, 0x1000}, 0x31) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000006c0001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="91400100400000001400030076657468300000000000000000000008"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000240)=@ax25={{0x3, @netrom}, [@bcast, @rose, @bcast, @rose, @netrom, @null, @netrom, @rose]}, 0x80, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/225, 0xe1}, {&(0x7f00000001c0)=""/28, 0x1c}, {&(0x7f00000003c0)=""/64, 0x40}, {&(0x7f0000000480)=""/188, 0xbc}, {&(0x7f0000000540)=""/74, 0x4a}, {&(0x7f0000000400)=""/10, 0xa}, {&(0x7f00000005c0)=""/229, 0xe5}, {&(0x7f00000006c0)=""/64, 0x40}, {&(0x7f0000000700)=""/252, 0xfc}], 0x9, &(0x7f00000008c0)=""/78, 0x4e}, 0x100) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4}, 0xc) ioctl$XFS_IOC_GET_RESBLKS(r1, 0x80105873, &(0x7f0000000980)) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000140)={0x8000000000000001, {0x0, 0x2, 0x7, 0xb68, 0x85f}}) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 179.444874ms ago: executing program 4 (id=632): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000003c0000000000000000000de7000000000000000000000000000000000000000000000000000000001d0000000000000000000000b3dfb4fb00000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b"], 0x23c}}, 0x0) 171.219835ms ago: executing program 0 (id=633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x47a8, &(0x7f0000000740)={0x0, 0x46b6, 0x8, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700), &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) io_setup(0x239f, &(0x7f0000000380)) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x4) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x2000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x257, &(0x7f0000000300)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) poll(&(0x7f0000000300)=[{r6, 0x80}], 0x1, 0x101) setreuid(0x0, 0xee00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) fallocate(r5, 0x1, 0xffc, 0x9) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000010000104000000000000deffffffffff1a5598186b4c17f0ae", @ANYRES32=0x0, @ANYBLOB="5d58000000000000140003006970766c616e31000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) 170.950934ms ago: executing program 4 (id=634): r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000480)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000ffd, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000002240)="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", 0xc24, 0x4085, 0x0, 0x0) (async) sendto$inet(r1, &(0x7f0000002240)="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", 0xc24, 0x4085, 0x0, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2005, &(0x7f0000000600)=0x20002d34, 0x7, 0x6) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) (async) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x3, r2}) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x3, r2}) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/time\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cc, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) close_range(r0, r0, 0x0) syz_emit_ethernet(0x429, &(0x7f0000000840)={@local, @random="c6eb8947e4e4", @void, {@ipv6={0x86dd, @gre_packet={0x6, 0x6, "b02141", 0x3f3, 0x2f, 0x1, @remote, @local, {[@routing={0x4, 0xc, 0x2, 0x0, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xff, 0x3, [0x8, 0x8], "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"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x2c3], "12ac5dcde1fb785d24fcd467e4fa4cc0040929322ec8f19b13270f59578fe5a5acb11a480f2065006d239e4c6efd2ca4969a2459709794a68b9c764bf0299f3b1dc2a4a7dbc40626327da34133678f52c4de063f1b99a60be5531cbe0c6193ef4f0dfa268f74d847956f2f5a330849f1f83cc2f805e089e6bcb08027f7498f2f7b240cee91a751830353899025b9de633f2f477284cf5a22b9e078f2e848a068647424643e03ac3c07e33262b30fa6441d3199e4a242afe5904c860ed5beb28fc47f9f2da678ea651681604c9162cd7eb4a1b632533796689affaf5893e3762e7bad"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "4230222dbaf1dd199b4c1087c01d602f0a07b73418838d1fe1efe83c7537776c57d948b6744381d39661b9a40a3398b50fa951fbe0e97f44ea914ce1987f6427d302a4241096f5aefebb0ac88456dd2383f4f20524952db786cfbe78a051a8fdce20542244bb38338d8f24c60ed5bd0a9d60c8e93806400d5805d6d50c7b51717a0fdb3c988a167d986b35e4ea094e9508c4af540a17db3ecdaa8872f2c98017b12ec6d2b28451574e633f38e9f213377ddda00786e47c2518"}, {0x8, 0x88be, 0x2, {{0x4, 0x1, 0x3, 0x1, 0x0, 0x0, 0x3, 0xd}, 0x1, {0xb4f}}}, {0x8, 0x22eb, 0x2, {{0x7, 0x2, 0x8, 0x0, 0x1, 0x3, 0x5, 0x3}, 0x2, {0x9342, 0x8, 0x2, 0xc, 0x0, 0x1, 0x2}}}, {0x8, 0x6558, 0x0, "7ece9009a48e34dc44fa05b232f5740451de1352b743d54924b2d124fe1e8af8467d781e18231d2ed94f28cf3707ecd28ffbdb10475f979d3eab838727c36091e010485f36d6847ac410cc7f0e62be2d9c6b3bf18162cb686ce5a63496715bdcb854f85055c684bfddb50316f0312fd124e8865ba2a38987ace46cc2faf813f3fa30ad2408bb272c4b508e396c177e1ea88eaa32832b5991bbd93ffdc637636a8b9980fea7a7b3"}}}}}}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f00000000c0)={0x1, 0x100, 0x0, 0x18316, 0x6, "03e1ff00001e000000000000000000435ec2ba", 0x18001, 0x8}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000200)=0x10) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000200)=0x10) 170.091534ms ago: executing program 2 (id=635): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000480)={0x2, &(0x7f0000000440)=[{0x8, 0xa1, 0xe, 0xfffffffd}, {0x9, 0xe, 0x4, 0x80}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmsg$unix(r2, 0x0, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a400fe00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000003f000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x900}, 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 160.930754ms ago: executing program 3 (id=636): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01"], 0x7c}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x9, 0x200, 0x4, 0x1}, &(0x7f0000000380)=0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x80000001}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x8000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x4000000000010049) 0s ago: executing program 3 (id=637): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0708977b7e77d780fbb3fa060000000000000000000000020000"], 0x20}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async) utimes(&(0x7f0000000240)='./file0\x00', 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, 0x0, 0x84) (async) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): rt_read+0x1c7/0x2c0 [ 51.232594][ T4098] do_user_addr_fault+0x62f/0x1050 [ 51.232707][ T4098] ? ksys_mmap_pgoff+0xc1/0x310 [ 51.232734][ T4098] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 51.232759][ T4098] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 51.232779][ T4098] ? trace_page_fault_user+0x1f/0xe0 [ 51.232884][ T4098] exc_page_fault+0x62/0xa0 [ 51.232901][ T4098] asm_exc_page_fault+0x26/0x30 [ 51.232920][ T4098] RIP: 0033:0x7f075f443b98 [ 51.232940][ T4098] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 51.232980][ T4098] RSP: 002b:00007f075dfde470 EFLAGS: 00010286 [ 51.233020][ T4098] RAX: 0000000000001000 RBX: 00007f075dfde530 RCX: 0000000000000001 [ 51.233032][ T4098] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 00007f075dfde5d0 [ 51.233098][ T4098] RBP: 00000000000000f0 R08: 00007f0755bbf000 R09: 00000000000000ff [ 51.233110][ T4098] R10: 0000000000000000 R11: 00007f075dfde540 R12: 0000000000000001 [ 51.233173][ T4098] R13: 00007f075f642600 R14: 0000000000000000 R15: 00007f075dfde5d0 [ 51.233188][ T4098] [ 51.233271][ T4098] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 51.448112][ T4098] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 51.464744][ T4098] JBD2: no valid journal superblock found [ 51.470740][ T4098] EXT4-fs (loop3): Could not load journal inode [ 51.533814][ T4106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 51.544926][ T4108] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20001 [ 52.477310][ T4132] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 52.505857][ T4132] EXT4-fs error (device loop1): ext4_get_journal_inode:5888: inode #2: comm syz.1.197: iget: special inode unallocated [ 52.534291][ T4132] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 52.540016][ T4132] EXT4-fs (loop1): no journal found [ 52.549109][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 52.549130][ C1] EXT4-fs (loop1): initial error at time 1774838503: ext4_get_journal_inode:5888: inode 2 [ 52.549160][ C1] EXT4-fs (loop1): last error at time 1774838503: ext4_get_journal_inode:5888: inode 2 [ 52.594949][ T4136] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.632230][ T4137] siw: device registration error -23 [ 52.722149][ T4136] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.755298][ T4136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.809313][ T4136] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.885387][ T4141] FAULT_INJECTION: forcing a failure. [ 52.885387][ T4141] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 52.984552][ T4141] CPU: 0 UID: 0 PID: 4141 Comm: syz.1.199 Not tainted syzkaller #0 PREEMPT(full) [ 52.984638][ T4141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 52.984665][ T4141] Call Trace: [ 52.984710][ T4141] [ 52.984717][ T4141] __dump_stack+0x1d/0x30 [ 52.984743][ T4141] dump_stack_lvl+0x95/0xd0 [ 52.984766][ T4141] dump_stack+0x15/0x1b [ 52.984799][ T4141] should_fail_ex+0x263/0x280 [ 52.984860][ T4141] should_fail_alloc_page+0xf2/0x100 [ 52.984883][ T4141] __alloc_frozen_pages_noprof+0x108/0x360 [ 52.984938][ T4141] alloc_pages_mpol+0xb3/0x260 [ 52.984965][ T4141] ? css_rstat_updated+0xbb/0x280 [ 52.984987][ T4141] vma_alloc_folio_noprof+0x1a9/0x300 [ 52.985030][ T4141] handle_mm_fault+0x1129/0x3020 [ 52.985113][ T4141] ? vma_start_read+0x1c7/0x2c0 [ 52.985141][ T4141] do_user_addr_fault+0x62f/0x1050 [ 52.985172][ T4141] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 52.985199][ T4141] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 52.985280][ T4141] ? trace_page_fault_user+0x1f/0xe0 [ 52.985325][ T4141] exc_page_fault+0x62/0xa0 [ 52.985346][ T4141] asm_exc_page_fault+0x26/0x30 [ 52.985435][ T4141] RIP: 0033:0x7fe270cb3ae3 [ 52.985451][ T4141] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 52.985477][ T4141] RSP: 002b:00007fe26f856470 EFLAGS: 00010202 [ 52.985495][ T4141] RAX: 0000000000002000 RBX: 00007fe26f856530 RCX: 00007fe267437000 [ 52.985509][ T4141] RDX: 00007fe26f8566d0 RSI: 0000000000000003 RDI: 00007fe26f8565d0 [ 52.985598][ T4141] RBP: 000000000000002a R08: 0000000000000008 R09: 00000000000000b5 [ 52.985611][ T4141] R10: 00000000000000be R11: 00007fe26f856530 R12: 0000000000000001 [ 52.985624][ T4141] R13: 00007fe270eb2600 R14: 0000000000000080 R15: 00007fe26f8565d0 [ 52.985643][ T4141] [ 52.985655][ T4141] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 53.178639][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.191953][ T4141] set_capacity_and_notify: 5 callbacks suppressed [ 53.192034][ T4141] loop1: detected capacity change from 0 to 1024 [ 53.212111][ T4141] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 53.230694][ T4141] JBD2: no valid journal superblock found [ 53.243202][ T4141] EXT4-fs (loop1): Could not load journal inode [ 53.340011][ T28] kauditd_printk_skb: 111 callbacks suppressed [ 53.340026][ T28] audit: type=1400 audit(1774838504.113:354): avc: denied { write } for pid=4144 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 53.367769][ T4150] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20003 [ 53.384351][ T4150] netlink: 'syz.2.203': attribute type 16 has an invalid length. [ 53.396579][ T4150] netlink: 'syz.2.203': attribute type 17 has an invalid length. [ 53.418486][ T4160] syz.4.202 uses obsolete (PF_INET,SOCK_PACKET) [ 53.428950][ T4152] loop4: detected capacity change from 0 to 512 [ 53.444589][ T4150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 53.466674][ T4166] netlink: 'syz.3.205': attribute type 8 has an invalid length. [ 53.469124][ T28] audit: type=1400 audit(1774838504.243:355): avc: denied { write } for pid=4155 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 53.480769][ T4152] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 53.501841][ T4152] EXT4-fs (loop4): orphan cleanup on readonly fs [ 53.508317][ T28] audit: type=1400 audit(1774838504.243:356): avc: denied { read } for pid=4155 comm="syz.1.204" lport=57937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.529170][ T28] audit: type=1400 audit(1774838504.253:357): avc: denied { bind } for pid=4164 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.550541][ T4152] EXT4-fs warning (device loop4): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 53.568799][ T4152] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 53.575914][ T4152] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.202: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 53.593921][ T4152] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 53.594190][ T4152] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.202: couldn't read orphan inode 13 (err -117) [ 53.603343][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 53.603360][ C0] EXT4-fs (loop4): last error at time 1774838504: ext4_ext_check_inode:521: inode 13 [ 53.610609][ T28] audit: type=1400 audit(1774838504.383:358): avc: denied { open } for pid=4171 comm="syz.2.207" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.615229][ T4152] loop4: lost filesystem error report for type 5 error -117 [ 53.655751][ T4152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.679334][ T4152] EXT4-fs (loop4): shut down requested (0) [ 53.685561][ T28] audit: type=1400 audit(1774838504.473:359): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 53.707746][ T28] audit: type=1400 audit(1774838504.473:360): avc: denied { search } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.729553][ T28] audit: type=1400 audit(1774838504.473:361): avc: denied { search } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.751186][ T28] audit: type=1400 audit(1774838504.473:362): avc: denied { add_name } for pid=2982 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.773283][ T28] audit: type=1400 audit(1774838504.473:363): avc: denied { create } for pid=2982 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.825009][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.061878][ T4176] 9p: Bad value for 'source' [ 54.548478][ T4188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.213'. [ 54.618621][ T4189] lo speed is unknown, defaulting to 1000 [ 54.659638][ T4189] lo speed is unknown, defaulting to 1000 [ 54.846351][ T4193] FAULT_INJECTION: forcing a failure. [ 54.846351][ T4193] name failslab, interval 1, probability 0, space 0, times 0 [ 54.892645][ T4193] CPU: 0 UID: 0 PID: 4193 Comm: syz.2.215 Not tainted syzkaller #0 PREEMPT(full) [ 54.892694][ T4193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 54.892704][ T4193] Call Trace: [ 54.892772][ T4193] [ 54.892779][ T4193] __dump_stack+0x1d/0x30 [ 54.892804][ T4193] dump_stack_lvl+0x95/0xd0 [ 54.892828][ T4193] dump_stack+0x15/0x1b [ 54.892850][ T4193] should_fail_ex+0x263/0x280 [ 54.892928][ T4193] should_failslab+0x8c/0xb0 [ 54.892951][ T4193] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 54.892971][ T4193] ? __alloc_skb+0x2d6/0x690 [ 54.892995][ T4193] __alloc_skb+0x2d6/0x690 [ 54.893074][ T4193] ? __alloc_skb+0x200/0x690 [ 54.893181][ T4193] netlink_alloc_large_skb+0xbf/0xf0 [ 54.893224][ T4193] netlink_sendmsg+0x40c/0x6f0 [ 54.893246][ T4193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.893265][ T4193] __sys_sendto+0x42e/0x490 [ 54.893364][ T4193] __x64_sys_sendto+0x76/0x90 [ 54.893449][ T4193] x64_sys_call+0x2d35/0x3020 [ 54.893476][ T4193] do_syscall_64+0x12c/0x370 [ 54.893499][ T4193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.893517][ T4193] RIP: 0033:0x7f77fd8dc819 [ 54.893531][ T4193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.893625][ T4193] RSP: 002b:00007f77fc337028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 54.893644][ T4193] RAX: ffffffffffffffda RBX: 00007f77fdb55fa0 RCX: 00007f77fd8dc819 [ 54.893656][ T4193] RDX: 0000000000000012 RSI: 0000200000000740 RDI: 0000000000000003 [ 54.893670][ T4193] RBP: 00007f77fc337090 R08: 0000000000000000 R09: 0000000000000000 [ 54.893684][ T4193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.893697][ T4193] R13: 00007f77fdb56038 R14: 00007f77fdb55fa0 R15: 00007ffdba9ed328 [ 54.893720][ T4193] [ 55.290303][ T4197] loop0: detected capacity change from 0 to 512 [ 55.988584][ T4211] tmpfs: Bad value for 'mpol' [ 56.175927][ T4215] siw: device registration error -23 [ 56.662382][ T4217] 9pnet: p9_errstr2errno: server reported unknown error [ 56.875423][ T4219] loop4: detected capacity change from 0 to 1024 [ 56.921054][ T4219] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 56.960383][ T4219] JBD2: no valid journal superblock found [ 56.972935][ T4219] EXT4-fs (loop4): Could not load journal inode [ 57.064088][ T4230] xfrm2: entered promiscuous mode [ 57.104827][ T4235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 57.120622][ T4235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 57.144539][ T4230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.153316][ T4230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.471125][ T4251] 9p: Bad value for 'source' [ 58.978563][ T4252] loop4: detected capacity change from 0 to 1024 [ 59.195413][ T4260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.234'. [ 59.247212][ T4261] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4261 comm=syz.2.234 [ 59.399208][ T4252] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 59.419761][ T4266] loop0: detected capacity change from 0 to 1024 [ 59.436211][ T4261] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1025 sclass=netlink_tcpdiag_socket pid=4261 comm=syz.2.234 [ 59.479590][ T4266] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 59.532380][ T4252] System zones: 0-1, 3-36 [ 59.553557][ T4266] JBD2: no valid journal superblock found [ 59.596361][ T4266] EXT4-fs (loop0): Could not load journal inode [ 59.644275][ T4252] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.227: bad orphan inode 134217728 [ 59.694525][ T4252] loop4: lost filesystem error report for type 5 error -117 [ 59.700087][ T4252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.727150][ T4274] lo speed is unknown, defaulting to 1000 [ 59.733267][ T4274] lo speed is unknown, defaulting to 1000 [ 59.819485][ T4283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'. [ 59.828357][ T4283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'. [ 59.890637][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 59.890654][ T28] audit: type=1400 audit(1774838510.663:370): avc: denied { add_name } for pid=4233 comm="syz.4.227" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.652602][ T4293] 9p: Bad value for 'source' [ 63.232578][ T4313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=4313 comm=syz.3.250 [ 63.285282][ T4316] loop1: detected capacity change from 0 to 1024 [ 63.323473][ T4316] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 63.344304][ T4313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=4313 comm=syz.3.250 [ 63.367313][ T4316] JBD2: no valid journal superblock found [ 63.373356][ T4316] EXT4-fs (loop1): Could not load journal inode [ 63.559298][ T4331] FAULT_INJECTION: forcing a failure. [ 63.559298][ T4331] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 63.572840][ T4331] CPU: 1 UID: 0 PID: 4331 Comm: syz.0.255 Not tainted syzkaller #0 PREEMPT(full) [ 63.572866][ T4331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 63.572877][ T4331] Call Trace: [ 63.572882][ T4331] [ 63.572890][ T4331] __dump_stack+0x1d/0x30 [ 63.572945][ T4331] dump_stack_lvl+0x95/0xd0 [ 63.572969][ T4331] dump_stack+0x15/0x1b [ 63.572991][ T4331] should_fail_ex+0x263/0x280 [ 63.573020][ T4331] should_fail_alloc_page+0xf2/0x100 [ 63.573054][ T4331] __alloc_frozen_pages_noprof+0x108/0x360 [ 63.573079][ T4331] alloc_pages_mpol+0xb3/0x260 [ 63.573104][ T4331] ? css_rstat_updated+0xbb/0x280 [ 63.573186][ T4331] vma_alloc_folio_noprof+0x1a9/0x300 [ 63.573216][ T4331] handle_mm_fault+0x1129/0x3020 [ 63.573322][ T4331] ? vma_start_read+0x1c7/0x2c0 [ 63.573419][ T4331] do_user_addr_fault+0x62f/0x1050 [ 63.573444][ T4331] ? ksys_mmap_pgoff+0xc1/0x310 [ 63.573473][ T4331] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 63.573520][ T4331] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 63.573545][ T4331] ? trace_page_fault_user+0x1f/0xe0 [ 63.573569][ T4331] exc_page_fault+0x62/0xa0 [ 63.573605][ T4331] asm_exc_page_fault+0x26/0x30 [ 63.573632][ T4331] RIP: 0033:0x7f72907e3ae3 [ 63.573653][ T4331] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 63.573673][ T4331] RSP: 002b:00007f728f35d470 EFLAGS: 00010202 [ 63.573687][ T4331] RAX: 0000000000010000 RBX: 00007f728f35d530 RCX: 00007f7286f3e000 [ 63.573731][ T4331] RDX: 00007f728f35d6d0 RSI: 0000000000000003 RDI: 00007f728f35d5d0 [ 63.573742][ T4331] RBP: 0000000000000087 R08: 0000000000000008 R09: 00000000000000a7 [ 63.573755][ T4331] R10: 00000000000000be R11: 00007f728f35d530 R12: 0000000000000001 [ 63.573769][ T4331] R13: 00007f72909e2600 R14: 000000000000000b R15: 00007f728f35d5d0 [ 63.573787][ T4331] [ 63.573824][ T4331] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 63.773402][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.788530][ T4331] loop0: detected capacity change from 0 to 1024 [ 63.795965][ T28] audit: type=1400 audit(1774838514.573:371): avc: denied { unlink } for pid=3316 comm="syz-executor" name="file0" dev="tmpfs" ino=287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 63.847521][ T4331] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 63.864220][ T4336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.258'. [ 63.877739][ T4331] JBD2: no valid journal superblock found [ 63.883670][ T4331] EXT4-fs (loop0): Could not load journal inode [ 63.900539][ T4336] netlink: 36 bytes leftover after parsing attributes in process `syz.1.258'. [ 63.940538][ T4343] FAULT_INJECTION: forcing a failure. [ 63.940538][ T4343] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 63.958766][ T4336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=4336 comm=syz.1.258 [ 63.976675][ T4343] CPU: 1 UID: 0 PID: 4343 Comm: syz.3.260 Not tainted syzkaller #0 PREEMPT(full) [ 63.976747][ T4343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 63.976763][ T4343] Call Trace: [ 63.976769][ T4343] [ 63.976775][ T4343] __dump_stack+0x1d/0x30 [ 63.976799][ T4343] dump_stack_lvl+0x95/0xd0 [ 63.976819][ T4343] dump_stack+0x15/0x1b [ 63.976880][ T4343] should_fail_ex+0x263/0x280 [ 63.976904][ T4343] should_fail+0xb/0x20 [ 63.976923][ T4343] should_fail_usercopy+0x1a/0x20 [ 63.976947][ T4343] _copy_from_iter+0xcf/0xea0 [ 63.977020][ T4343] ? ip_cmsg_send+0x53b/0x5f0 [ 63.977067][ T4343] raw_sendmsg+0xc00/0x1140 [ 63.977132][ T4343] ? __pfx_raw_sendmsg+0x10/0x10 [ 63.977156][ T4343] inet_sendmsg+0xc5/0xd0 [ 63.977287][ T4343] ? __pfx_inet_sendmsg+0x10/0x10 [ 63.977313][ T4343] ____sys_sendmsg+0x519/0x5b0 [ 63.977344][ T4343] ___sys_sendmsg+0x195/0x1e0 [ 63.977410][ T4343] __x64_sys_sendmsg+0xd4/0x160 [ 63.977429][ T4343] x64_sys_call+0x194c/0x3020 [ 63.977450][ T4343] do_syscall_64+0x12c/0x370 [ 63.977566][ T4343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.977584][ T4343] RIP: 0033:0x7f075f58c819 [ 63.977647][ T4343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.977663][ T4343] RSP: 002b:00007f075dfdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.977683][ T4343] RAX: ffffffffffffffda RBX: 00007f075f805fa0 RCX: 00007f075f58c819 [ 63.977753][ T4343] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000004 [ 63.977764][ T4343] RBP: 00007f075dfdf090 R08: 0000000000000000 R09: 0000000000000000 [ 63.977775][ T4343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.977785][ T4343] R13: 00007f075f806038 R14: 00007f075f805fa0 R15: 00007fff889da8c8 [ 63.977883][ T4343] [ 64.169573][ T28] audit: type=1400 audit(1774838514.943:372): avc: denied { write } for pid=4347 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 64.239107][ T28] audit: type=1400 audit(1774838515.013:373): avc: denied { ioctl } for pid=4356 comm="syz.3.264" path="socket:[8391]" dev="sockfs" ino=8391 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.267553][ T28] audit: type=1400 audit(1774838515.043:374): avc: denied { create } for pid=4356 comm="syz.3.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 64.423160][ T4367] loop2: detected capacity change from 0 to 1024 [ 64.433151][ T4367] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 64.453675][ T4367] JBD2: no valid journal superblock found [ 64.463623][ T4367] EXT4-fs (loop2): Could not load journal inode [ 64.510239][ T4377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'. [ 64.664707][ T4380] netlink: 2 bytes leftover after parsing attributes in process `syz.1.273'. [ 64.704996][ T4386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 64.714194][ T4386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 64.760180][ T4394] vlan0: entered promiscuous mode [ 64.761799][ T4393] FAULT_INJECTION: forcing a failure. [ 64.761799][ T4393] name failslab, interval 1, probability 0, space 0, times 0 [ 64.786908][ T4396] loop2: detected capacity change from 0 to 1024 [ 64.793864][ T4396] EXT4-fs: Ignoring removed bh option [ 64.799685][ T4396] EXT4-fs: Ignoring removed bh option [ 64.805255][ T4396] EXT4-fs: Ignoring removed bh option [ 64.807105][ T4393] CPU: 1 UID: 0 PID: 4393 Comm: syz.3.276 Not tainted syzkaller #0 PREEMPT(full) [ 64.807192][ T4393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 64.807204][ T4393] Call Trace: [ 64.807210][ T4393] [ 64.807218][ T4393] __dump_stack+0x1d/0x30 [ 64.807244][ T4393] dump_stack_lvl+0x95/0xd0 [ 64.807266][ T4393] dump_stack+0x15/0x1b [ 64.807286][ T4393] should_fail_ex+0x263/0x280 [ 64.807414][ T4393] should_failslab+0x8c/0xb0 [ 64.807436][ T4393] kmem_cache_alloc_noprof+0x66/0x400 [ 64.807458][ T4393] ? dst_alloc+0xbd/0x100 [ 64.807532][ T4393] dst_alloc+0xbd/0x100 [ 64.807631][ T4393] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 64.807659][ T4393] ip_route_output_flow+0x65/0x110 [ 64.807682][ T4393] raw_sendmsg+0xc91/0x1140 [ 64.807752][ T4393] ? __pfx_raw_sendmsg+0x10/0x10 [ 64.807795][ T4393] inet_sendmsg+0xc5/0xd0 [ 64.807824][ T4393] ? __pfx_inet_sendmsg+0x10/0x10 [ 64.807853][ T4393] ____sys_sendmsg+0x519/0x5b0 [ 64.807950][ T4393] ___sys_sendmsg+0x195/0x1e0 [ 64.808120][ T4393] __x64_sys_sendmsg+0xd4/0x160 [ 64.808141][ T4393] x64_sys_call+0x194c/0x3020 [ 64.808165][ T4393] do_syscall_64+0x12c/0x370 [ 64.808191][ T4393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.808239][ T4393] RIP: 0033:0x7f075f58c819 [ 64.808255][ T4393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.808350][ T4393] RSP: 002b:00007f075dfdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.808370][ T4393] RAX: ffffffffffffffda RBX: 00007f075f805fa0 RCX: 00007f075f58c819 [ 64.808384][ T4393] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000004 [ 64.808397][ T4393] RBP: 00007f075dfdf090 R08: 0000000000000000 R09: 0000000000000000 [ 64.808409][ T4393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.808421][ T4393] R13: 00007f075f806038 R14: 00007f075f805fa0 R15: 00007fff889da8c8 [ 64.808507][ T4393] [ 64.843302][ T4397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.275'. [ 64.870704][ T28] audit: type=1400 audit(1774838515.633:375): avc: denied { create } for pid=4399 comm="syz.3.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 64.873572][ T4397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.275'. [ 64.878920][ T28] audit: type=1400 audit(1774838515.633:376): avc: denied { read } for pid=4399 comm="syz.3.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 65.099709][ T4405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 65.137753][ T28] audit: type=1400 audit(1774838515.863:377): avc: denied { lock } for pid=4399 comm="syz.3.279" path="socket:[8483]" dev="sockfs" ino=8483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 65.186277][ T4396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.219556][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.273418][ T4424] netlink: 2 bytes leftover after parsing attributes in process `syz.1.285'. [ 65.397180][ T4424] FAULT_INJECTION: forcing a failure. [ 65.397180][ T4424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.410400][ T4424] CPU: 1 UID: 0 PID: 4424 Comm: syz.1.285 Not tainted syzkaller #0 PREEMPT(full) [ 65.410472][ T4424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 65.410504][ T4424] Call Trace: [ 65.410511][ T4424] [ 65.410520][ T4424] __dump_stack+0x1d/0x30 [ 65.410560][ T4424] dump_stack_lvl+0x95/0xd0 [ 65.410581][ T4424] dump_stack+0x15/0x1b [ 65.410602][ T4424] should_fail_ex+0x263/0x280 [ 65.410630][ T4424] should_fail+0xb/0x20 [ 65.410689][ T4424] should_fail_usercopy+0x1a/0x20 [ 65.410717][ T4424] _copy_to_user+0x20/0xa0 [ 65.410747][ T4424] simple_read_from_buffer+0xb5/0x130 [ 65.410798][ T4424] proc_fail_nth_read+0x10e/0x150 [ 65.410893][ T4424] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.410961][ T4424] vfs_read+0x1ab/0x7f0 [ 65.410979][ T4424] ? __rcu_read_unlock+0x4e/0x70 [ 65.411062][ T4424] ? __fget_files+0x184/0x1c0 [ 65.411122][ T4424] ? mutex_lock+0x57/0x90 [ 65.411142][ T4424] ksys_read+0xdc/0x1a0 [ 65.411161][ T4424] __x64_sys_read+0x40/0x50 [ 65.411220][ T4424] x64_sys_call+0x2886/0x3020 [ 65.411327][ T4424] do_syscall_64+0x12c/0x370 [ 65.411353][ T4424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.411375][ T4424] RIP: 0033:0x7fe270dbd04e [ 65.411392][ T4424] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 65.411446][ T4424] RSP: 002b:00007fe26f856fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.411467][ T4424] RAX: ffffffffffffffda RBX: 00007fe26f8576c0 RCX: 00007fe270dbd04e [ 65.411482][ T4424] RDX: 000000000000000f RSI: 00007fe26f8570a0 RDI: 0000000000000004 [ 65.411495][ T4424] RBP: 00007fe26f857090 R08: 0000000000000000 R09: 0000000000000000 [ 65.411508][ T4424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.411521][ T4424] R13: 00007fe271076038 R14: 00007fe271075fa0 R15: 00007fff6bd9fa38 [ 65.411616][ T4424] [ 65.601746][ T4434] netlink: 20 bytes leftover after parsing attributes in process `syz.3.283'. [ 65.611082][ T4434] netlink: 20 bytes leftover after parsing attributes in process `syz.3.283'. [ 65.635477][ T4436] loop0: detected capacity change from 0 to 512 [ 65.651148][ T4432] loop4: detected capacity change from 0 to 1024 [ 65.672418][ T4421] syzkaller0: entered promiscuous mode [ 65.677991][ T4421] syzkaller0: entered allmulticast mode [ 65.908813][ T4432] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 65.920715][ T4436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.962097][ T4436] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.016943][ T4432] JBD2: no valid journal superblock found [ 66.022899][ T4432] EXT4-fs (loop4): Could not load journal inode [ 66.069174][ T4442] vlan0: entered promiscuous mode [ 66.158708][ T4451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 66.168475][ T4454] loop3: detected capacity change from 0 to 1024 [ 66.182828][ T4454] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 66.198098][ T4451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 66.215566][ T28] audit: type=1400 audit(1774838516.993:378): avc: denied { write } for pid=4455 comm="syz.2.295" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 66.219919][ T4456] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 66.238635][ T28] audit: type=1400 audit(1774838516.993:379): avc: denied { load_policy } for pid=4455 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 66.247308][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.279593][ T4454] JBD2: no valid journal superblock found [ 66.285641][ T4454] EXT4-fs (loop3): Could not load journal inode [ 66.294763][ T4456] SELinux: failed to load policy [ 66.355380][ T4465] loop0: detected capacity change from 0 to 1024 [ 66.355619][ T4466] loop3: detected capacity change from 0 to 512 [ 66.369994][ T4456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.295'. [ 66.383330][ T4466] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.395336][ T4465] EXT4-fs: Ignoring removed bh option [ 66.407838][ T28] audit: type=1400 audit(1774838517.183:380): avc: denied { write } for pid=4455 comm="syz.2.295" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 66.454212][ T4465] EXT4-fs: Ignoring removed bh option [ 66.456050][ T4469] lo speed is unknown, defaulting to 1000 [ 66.459634][ T4465] EXT4-fs: Ignoring removed bh option [ 66.489054][ T28] audit: type=1400 audit(1774838517.183:381): avc: denied { mounton } for pid=4464 comm="syz.3.298" path="/63/file0" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 66.510989][ T4469] lo speed is unknown, defaulting to 1000 [ 66.608340][ T28] audit: type=1400 audit(1774838517.213:382): avc: denied { bind } for pid=4460 comm="syz.4.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 66.638003][ T4465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.550814][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.309178][ T4498] FAULT_INJECTION: forcing a failure. [ 68.309178][ T4498] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 68.328054][ T4501] vlan0: entered promiscuous mode [ 68.333551][ T4498] CPU: 0 UID: 0 PID: 4498 Comm: syz.1.306 Not tainted syzkaller #0 PREEMPT(full) [ 68.333577][ T4498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 68.333588][ T4498] Call Trace: [ 68.333594][ T4498] [ 68.333601][ T4498] __dump_stack+0x1d/0x30 [ 68.333695][ T4498] dump_stack_lvl+0x95/0xd0 [ 68.333715][ T4498] dump_stack+0x15/0x1b [ 68.333733][ T4498] should_fail_ex+0x263/0x280 [ 68.333776][ T4498] should_fail_alloc_page+0xf2/0x100 [ 68.333796][ T4498] __alloc_frozen_pages_noprof+0x108/0x360 [ 68.333821][ T4498] alloc_pages_mpol+0xb3/0x260 [ 68.333896][ T4498] ? css_rstat_updated+0xbb/0x280 [ 68.333913][ T4498] vma_alloc_folio_noprof+0x1a9/0x300 [ 68.333998][ T4498] handle_mm_fault+0x1129/0x3020 [ 68.334053][ T4498] ? vma_start_read+0x1c7/0x2c0 [ 68.334122][ T4498] do_user_addr_fault+0x62f/0x1050 [ 68.334231][ T4498] ? ksys_mmap_pgoff+0xc1/0x310 [ 68.334274][ T4498] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 68.334387][ T4498] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 68.334483][ T4498] ? trace_page_fault_user+0x1f/0xe0 [ 68.334511][ T4498] exc_page_fault+0x62/0xa0 [ 68.334531][ T4498] asm_exc_page_fault+0x26/0x30 [ 68.334573][ T4498] RIP: 0033:0x7fe270cb3ae3 [ 68.334641][ T4498] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 68.334655][ T4498] RSP: 002b:00007fe26f856470 EFLAGS: 00010206 [ 68.334669][ T4498] RAX: 0000000000014000 RBX: 00007fe26f856530 RCX: 00007fe267437000 [ 68.334682][ T4498] RDX: 00007fe26f8566d0 RSI: 0000000000000000 RDI: 00007fe26f8565d0 [ 68.334695][ T4498] RBP: 00000000000000cd R08: 0000000000000009 R09: 0000000000000193 [ 68.334708][ T4498] R10: 00000000000001ba R11: 00007fe26f856530 R12: 0000000000000001 [ 68.334720][ T4498] R13: 00007fe270eb2600 R14: 0000000000000011 R15: 00007fe26f8565d0 [ 68.334740][ T4498] [ 68.334773][ T4498] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 68.345998][ T4497] netlink: 'syz.3.307': attribute type 1 has an invalid length. [ 68.369573][ T4498] loop1: detected capacity change from 0 to 1024 [ 68.430618][ T28] audit: type=1400 audit(1774838519.173:383): avc: denied { create } for pid=4496 comm="syz.3.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 68.475820][ T4498] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 68.496760][ T28] audit: type=1400 audit(1774838519.173:384): avc: denied { write } for pid=4496 comm="syz.3.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 68.497897][ T4498] JBD2: no valid journal superblock found [ 68.505318][ T4508] netlink: 44 bytes leftover after parsing attributes in process `syz.3.307'. [ 68.513352][ T4498] EXT4-fs (loop1): Could not load journal inode [ 68.810283][ T4520] loop2: detected capacity change from 0 to 1024 [ 68.817954][ T28] audit: type=1400 audit(1774838519.593:385): avc: denied { accept } for pid=4509 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 68.856538][ T4520] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 68.868041][ T4530] random: crng reseeded on system resumption [ 68.879779][ T28] audit: type=1400 audit(1774838519.643:386): avc: denied { write } for pid=4509 comm="syz.0.310" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 68.934343][ T4520] JBD2: no valid journal superblock found [ 68.940439][ T4520] EXT4-fs (loop2): Could not load journal inode [ 69.131293][ T4560] netlink: 'syz.2.323': attribute type 3 has an invalid length. [ 69.205671][ T4577] FAULT_INJECTION: forcing a failure. [ 69.205671][ T4577] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 69.336279][ T4579] loop1: detected capacity change from 0 to 1024 [ 69.349035][ T4577] CPU: 1 UID: 0 PID: 4577 Comm: syz.4.328 Not tainted syzkaller #0 PREEMPT(full) [ 69.349063][ T4577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 69.349075][ T4577] Call Trace: [ 69.349082][ T4577] [ 69.349090][ T4577] __dump_stack+0x1d/0x30 [ 69.349118][ T4577] dump_stack_lvl+0x95/0xd0 [ 69.349157][ T4577] dump_stack+0x15/0x1b [ 69.349179][ T4577] should_fail_ex+0x263/0x280 [ 69.349290][ T4577] should_fail_alloc_page+0xf2/0x100 [ 69.349315][ T4577] __alloc_frozen_pages_noprof+0x108/0x360 [ 69.349346][ T4577] alloc_pages_mpol+0xb3/0x260 [ 69.349373][ T4577] ? css_rstat_updated+0xbb/0x280 [ 69.349438][ T4577] vma_alloc_folio_noprof+0x1a9/0x300 [ 69.349468][ T4577] handle_mm_fault+0x1129/0x3020 [ 69.349544][ T4577] ? vma_start_read+0x1c7/0x2c0 [ 69.349571][ T4577] do_user_addr_fault+0x62f/0x1050 [ 69.349602][ T4577] ? ksys_mmap_pgoff+0xc1/0x310 [ 69.349652][ T4577] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 69.349680][ T4577] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 69.349704][ T4577] ? trace_page_fault_user+0x1f/0xe0 [ 69.349756][ T4577] exc_page_fault+0x62/0xa0 [ 69.349777][ T4577] asm_exc_page_fault+0x26/0x30 [ 69.349797][ T4577] RIP: 0033:0x7fa33d133ae3 [ 69.349814][ T4577] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 69.349838][ T4577] RSP: 002b:00007fa33bcd6470 EFLAGS: 00010206 [ 69.349856][ T4577] RAX: 0000000000018000 RBX: 00007fa33bcd6530 RCX: 00007fa3338b7000 [ 69.349906][ T4577] RDX: 00007fa33bcd66d0 RSI: 0000000000000001 RDI: 00007fa33bcd65d0 [ 69.349920][ T4577] RBP: 0000000000000011 R08: 0000000000000009 R09: 0000000000000195 [ 69.349932][ T4577] R10: 00000000000001ba R11: 00007fa33bcd6530 R12: 0000000000000001 [ 69.349945][ T4577] R13: 00007fa33d332600 R14: 0000000000000027 R15: 00007fa33bcd65d0 [ 69.349968][ T4577] [ 69.350132][ T4577] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 69.452657][ T4579] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 69.452657][ T4579] [ 69.462446][ T4577] loop4: detected capacity change from 0 to 1024 [ 69.575117][ T4536] syz.3.319 (4536) used greatest stack depth: 9336 bytes left [ 69.595569][ T4577] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 69.641002][ T4579] SET target dimension over the limit! [ 69.653622][ T4577] JBD2: no valid journal superblock found [ 69.659800][ T4577] EXT4-fs (loop4): Could not load journal inode [ 69.712587][ T4579] loop1: detected capacity change from 0 to 1024 [ 69.723599][ T4579] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.754434][ T4614] loop0: detected capacity change from 0 to 128 [ 69.788951][ T4579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 69.820681][ T4624] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20003 [ 69.834686][ T4579] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.835885][ T4624] netlink: 'syz.3.336': attribute type 16 has an invalid length. [ 69.864447][ T4579] EXT4-fs error (device loop1): ext4_map_blocks:828: inode #15: comm syz.1.327: lblock 0 mapped to illegal pblock 0 (length 1) [ 69.881711][ T4624] netlink: 'syz.3.336': attribute type 17 has an invalid length. [ 69.895707][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 69.926908][ T4624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.966506][ T4630] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.996470][ T4631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 70.044449][ T4630] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.148619][ T4630] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.251720][ T4630] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.337819][ T41] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.351038][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.363541][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.387966][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.567030][ T4651] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 70.641896][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 70.641911][ T28] audit: type=1400 audit(1774838521.423:405): avc: denied { allowed } for pid=4656 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 70.686038][ T28] audit: type=1400 audit(1774838521.423:406): avc: denied { create } for pid=4656 comm="syz.2.350" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.775705][ T4664] vlan0: entered promiscuous mode [ 71.505419][ T4686] FAULT_INJECTION: forcing a failure. [ 71.505419][ T4686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.518690][ T4686] CPU: 0 UID: 0 PID: 4686 Comm: syz.1.359 Not tainted syzkaller #0 PREEMPT(full) [ 71.518717][ T4686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 71.518729][ T4686] Call Trace: [ 71.518736][ T4686] [ 71.518742][ T4686] __dump_stack+0x1d/0x30 [ 71.518764][ T4686] dump_stack_lvl+0x95/0xd0 [ 71.518809][ T4686] dump_stack+0x15/0x1b [ 71.518827][ T4686] should_fail_ex+0x263/0x280 [ 71.518849][ T4686] should_fail+0xb/0x20 [ 71.518993][ T4686] should_fail_usercopy+0x1a/0x20 [ 71.519020][ T4686] _copy_to_user+0x20/0xa0 [ 71.519050][ T4686] simple_read_from_buffer+0xb5/0x130 [ 71.519071][ T4686] proc_fail_nth_read+0x10e/0x150 [ 71.519161][ T4686] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.519185][ T4686] vfs_read+0x1ab/0x7f0 [ 71.519201][ T4686] ? __rcu_read_unlock+0x4e/0x70 [ 71.519252][ T4686] ? __fget_files+0x184/0x1c0 [ 71.519306][ T4686] ? mutex_lock+0x57/0x90 [ 71.519326][ T4686] ksys_read+0xdc/0x1a0 [ 71.519346][ T4686] __x64_sys_read+0x40/0x50 [ 71.519362][ T4686] x64_sys_call+0x2886/0x3020 [ 71.519383][ T4686] do_syscall_64+0x12c/0x370 [ 71.519463][ T4686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.519483][ T4686] RIP: 0033:0x7fe270dbd04e [ 71.519496][ T4686] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 71.519511][ T4686] RSP: 002b:00007fe26f856fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 71.519586][ T4686] RAX: ffffffffffffffda RBX: 00007fe26f8576c0 RCX: 00007fe270dbd04e [ 71.519600][ T4686] RDX: 000000000000000f RSI: 00007fe26f8570a0 RDI: 0000000000000005 [ 71.519620][ T4686] RBP: 00007fe26f857090 R08: 0000000000000000 R09: 0000000000000000 [ 71.519633][ T4686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.519646][ T4686] R13: 00007fe271076038 R14: 00007fe271075fa0 R15: 00007fff6bd9fa38 [ 71.519666][ T4686] [ 71.921503][ T4689] lo speed is unknown, defaulting to 1000 [ 71.927670][ T4689] lo speed is unknown, defaulting to 1000 [ 71.939988][ T4691] __nla_validate_parse: 3 callbacks suppressed [ 71.940002][ T4691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 71.985821][ T4695] loop3: detected capacity change from 0 to 1024 [ 72.001397][ T4695] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 72.020214][ T4695] JBD2: no valid journal superblock found [ 72.037927][ T4695] EXT4-fs (loop3): Could not load journal inode [ 72.050539][ T4697] syzkaller0: entered promiscuous mode [ 72.056126][ T4697] syzkaller0: entered allmulticast mode [ 72.135484][ T28] audit: type=1400 audit(1774838522.913:407): avc: denied { shutdown } for pid=4700 comm="syz.2.366" laddr=::ffff:172.20.20.10 lport=51517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.162775][ T4701] loop2: detected capacity change from 0 to 512 [ 72.196251][ T4701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.222151][ T28] audit: type=1400 audit(1774838522.943:408): avc: denied { mounton } for pid=4700 comm="syz.2.366" path="/76/file0" dev="tmpfs" ino=412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.244966][ T4701] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.299218][ T4701] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.429548][ T28] audit: type=1400 audit(1774838523.203:409): avc: denied { setopt } for pid=4713 comm="syz.2.370" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.452226][ T28] audit: type=1400 audit(1774838523.223:410): avc: denied { read } for pid=4713 comm="syz.2.370" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.486154][ T28] audit: type=1326 audit(1774838523.263:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4714 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075f58c819 code=0x7ffc0000 [ 72.519215][ T28] audit: type=1326 audit(1774838523.263:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4714 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075f58c819 code=0x7ffc0000 [ 72.543299][ T28] audit: type=1326 audit(1774838523.263:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4714 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075f58c819 code=0x7ffc0000 [ 72.566932][ T28] audit: type=1326 audit(1774838523.263:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4714 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075f58c819 code=0x7ffc0000 [ 72.664633][ T4724] loop0: detected capacity change from 0 to 512 [ 72.684560][ T4726] loop3: detected capacity change from 0 to 1024 [ 72.704806][ T4718] lo speed is unknown, defaulting to 1000 [ 72.711560][ T4726] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 72.711560][ T4726] [ 72.715267][ T4718] lo speed is unknown, defaulting to 1000 [ 72.734411][ T4724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.752662][ T4724] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.767018][ T4726] Cannot find add_set index 0 as target [ 72.789357][ T4726] netlink: 16146 bytes leftover after parsing attributes in process `syz.3.375'. [ 72.844264][ T4733] netlink: 2 bytes leftover after parsing attributes in process `syz.4.376'. [ 72.904633][ T4726] loop3: detected capacity change from 0 to 1024 [ 72.915834][ T4726] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.965626][ T4729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.372'. [ 72.989528][ T4726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 72.994793][ T4737] loop4: detected capacity change from 0 to 1024 [ 73.003538][ T4726] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.019543][ T4737] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 73.039765][ T4737] JBD2: no valid journal superblock found [ 73.055773][ T4737] EXT4-fs (loop4): Could not load journal inode [ 73.104554][ T4750] EXT4-fs error (device loop3): ext4_map_blocks:828: inode #15: comm syz.3.375: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.229353][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.336938][ T4762] loop3: detected capacity change from 0 to 2048 [ 73.355674][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.382240][ T4762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.406753][ T4762] netlink: 40 bytes leftover after parsing attributes in process `syz.3.382'. [ 73.557396][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.074381][ T4784] netlink: 20 bytes leftover after parsing attributes in process `syz.0.389'. [ 74.099867][ T4787] netlink: 72 bytes leftover after parsing attributes in process `syz.4.391'. [ 74.149395][ T4792] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 74.165096][ T4792] JBD2: no valid journal superblock found [ 74.171635][ T4792] EXT4-fs (loop0): Could not load journal inode [ 74.226897][ T4798] tipc: Started in network mode [ 74.235020][ T4798] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 74.250452][ T4798] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 74.265028][ T4798] tipc: Enabled bearer , priority 10 [ 74.571386][ T4798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.597477][ T4798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.629182][ T4798] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.484560][ T3363] tipc: Node number set to 1 [ 75.520116][ T4798] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.666619][ T4798] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.827899][ T4798] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.895611][ T4825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 75.987061][ T295] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.063906][ T295] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.093249][ T28] kauditd_printk_skb: 119 callbacks suppressed [ 76.093264][ T28] audit: type=1400 audit(1774838526.873:534): avc: denied { sqpoll } for pid=4826 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 76.126270][ T295] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.153143][ T295] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.174311][ T28] audit: type=1400 audit(1774838526.953:535): avc: denied { write } for pid=4826 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 76.201298][ T4827] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 76.279884][ T28] audit: type=1400 audit(1774838527.053:536): avc: denied { setopt } for pid=4826 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 76.301009][ T4829] netlink: 14 bytes leftover after parsing attributes in process `syz.3.402'. [ 76.345290][ T4830] set_capacity_and_notify: 2 callbacks suppressed [ 76.345305][ T4830] loop3: detected capacity change from 0 to 512 [ 76.372128][ T4829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.493824][ T4830] ------------[ cut here ]------------ [ 76.499316][ T4830] EA inode 11 i_nlink=2 [ 76.499337][ T4830] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.3.402/4830 [ 76.514374][ T4830] Modules linked in: [ 76.518262][ T4830] CPU: 1 UID: 0 PID: 4830 Comm: syz.3.402 Not tainted syzkaller #0 PREEMPT(full) [ 76.527575][ T4830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 76.537678][ T4830] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 76.544502][ T4830] Code: 84 3a 99 ff 4c 8d 2d 6d a5 5d 05 49 8d 7e 40 e8 04 d2 b5 ff 49 8b 6e 40 4c 89 e7 e8 38 cd b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 0f b9 dd 03 66 66 66 66 66 66 2e [ 76.564180][ T4830] RSP: 0018:ffffc901101af778 EFLAGS: 00010246 [ 76.570264][ T4830] RAX: ffff888104b95e88 RBX: ffff888106174ec8 RCX: ffffffff81c02688 [ 76.578803][ T4830] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dcbe0 [ 76.586838][ T4830] RBP: 000000000000000b R08: 0001888106174e7b R09: 0000000000000000 [ 76.594969][ T4830] R10: ffffc901101af6a8 R11: 0001c901101af6a8 R12: ffff888106174e78 [ 76.603123][ T4830] R13: ffffffff871dcbe0 R14: ffff888106174e30 R15: 0000000000000001 [ 76.611110][ T4830] FS: 00007f075df9d6c0(0000) GS:ffff8882ae9d8000(0000) knlGS:0000000000000000 [ 76.620046][ T4830] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.626728][ T4830] CR2: 00007fe26f835ff8 CR3: 000000011b9ca000 CR4: 00000000003506f0 [ 76.634727][ T4830] Call Trace: [ 76.638003][ T4830] [ 76.640967][ T4830] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 76.646891][ T4830] ? errseq_check+0x2c/0x50 [ 76.658013][ T4830] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 76.658727][ T28] audit: type=1400 audit(1774838527.443:537): avc: denied { read write } for pid=4838 comm="syz.4.405" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 76.663556][ T4830] ? ext4_truncate+0x92b/0xb00 [ 76.692321][ T4830] ext4_evict_inode+0xac1/0xe40 [ 76.697260][ T4830] ? __pfx_ext4_evict_inode+0x10/0x10 [ 76.697376][ T4836] loop1: detected capacity change from 0 to 1024 [ 76.702699][ T4830] evict+0x2af/0x510 [ 76.713060][ T4830] ? __dquot_initialize+0x146/0x7c0 [ 76.718285][ T4830] iput+0x41a/0x580 [ 76.722214][ T4830] ext4_process_orphan+0x1a9/0x1c0 [ 76.727410][ T4830] ext4_orphan_cleanup+0x6a8/0xa00 [ 76.727654][ T4836] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.732677][ T4830] ext4_fill_super+0x3414/0x37c0 [ 76.746101][ T4830] ? set_blocksize+0x14c/0x270 [ 76.750927][ T4830] ? setup_bdev_super+0x30e/0x370 [ 76.756020][ T4830] ? __pfx_ext4_fill_super+0x10/0x10 [ 76.761390][ T4830] get_tree_bdev_flags+0x291/0x300 [ 76.766514][ T4830] ? __pfx_ext4_fill_super+0x10/0x10 [ 76.771819][ T4830] get_tree_bdev+0x1f/0x30 [ 76.776310][ T4830] ext4_get_tree+0x1c/0x30 [ 76.780765][ T4830] vfs_get_tree+0x57/0x1d0 [ 76.785238][ T4830] do_new_mount+0x288/0x8d0 [ 76.788656][ T28] audit: type=1400 audit(1774838527.493:538): avc: denied { open } for pid=4838 comm="syz.4.405" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 76.789746][ T4830] path_mount+0x4d0/0xbc0 [ 76.818920][ T4830] __se_sys_mount+0x28c/0x2e0 [ 76.821288][ T4836] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (40000) [ 76.823625][ T4830] __x64_sys_mount+0x67/0x80 [ 76.823651][ T4830] x64_sys_call+0x2d61/0x3020 [ 76.842200][ T4830] do_syscall_64+0x12c/0x370 [ 76.846800][ T4830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.849024][ T4846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'. [ 76.852786][ T4830] RIP: 0033:0x7f075f58da8a [ 76.852813][ T4830] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.852836][ T4830] RSP: 002b:00007f075df9ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.852855][ T4830] RAX: ffffffffffffffda RBX: 00007f075df9cee0 RCX: 00007f075f58da8a [ 76.902679][ T4830] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f075df9cea0 [ 76.911258][ T4830] RBP: 00002000000009c0 R08: 00007f075df9cee0 R09: 0000000000800718 [ 76.919267][ T4830] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 76.932186][ T4830] R13: 00007f075df9cea0 R14: 000000000000048d R15: 0000200000000200 [ 76.940223][ T4830] [ 76.943267][ T4830] ---[ end trace 0000000000000000 ]--- [ 76.953624][ T4830] EXT4-fs (loop3): 1 orphan inode deleted [ 76.959820][ T4830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.973274][ T4847] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 77.016442][ T4829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.051878][ T4829] bond0 (unregistering): Released all slaves [ 77.065143][ T28] audit: type=1400 audit(1774838527.843:539): avc: denied { write } for pid=4826 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 77.121373][ T4849] FAULT_INJECTION: forcing a failure. [ 77.121373][ T4849] name failslab, interval 1, probability 0, space 0, times 0 [ 77.134241][ T4849] CPU: 1 UID: 0 PID: 4849 Comm: syz.0.408 Tainted: G W syzkaller #0 PREEMPT(full) [ 77.134269][ T4849] Tainted: [W]=WARN [ 77.134274][ T4849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 77.134283][ T4849] Call Trace: [ 77.134289][ T4849] [ 77.134296][ T4849] __dump_stack+0x1d/0x30 [ 77.134320][ T4849] dump_stack_lvl+0x95/0xd0 [ 77.134341][ T4849] dump_stack+0x15/0x1b [ 77.134360][ T4849] should_fail_ex+0x263/0x280 [ 77.134382][ T4849] should_failslab+0x8c/0xb0 [ 77.134402][ T4849] kmem_cache_alloc_noprof+0x66/0x400 [ 77.134438][ T4849] ? vm_area_alloc+0x2c/0xb0 [ 77.134457][ T4849] vm_area_alloc+0x2c/0xb0 [ 77.134473][ T4849] mmap_region+0x11ce/0x2050 [ 77.134507][ T4849] do_mmap+0x9b2/0xbd0 [ 77.134529][ T4849] vm_mmap_pgoff+0x183/0x2d0 [ 77.134553][ T4849] ksys_mmap_pgoff+0xc1/0x310 [ 77.134576][ T4849] ? __x64_sys_mmap+0x49/0x70 [ 77.134593][ T4849] x64_sys_call+0x14df/0x3020 [ 77.134618][ T4849] do_syscall_64+0x12c/0x370 [ 77.134642][ T4849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.134663][ T4849] RIP: 0033:0x7f729092c819 [ 77.134678][ T4849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.134693][ T4849] RSP: 002b:00007f728f37f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 77.134709][ T4849] RAX: ffffffffffffffda RBX: 00007f7290ba5fa0 RCX: 00007f729092c819 [ 77.134722][ T4849] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000 [ 77.134735][ T4849] RBP: 00007f728f37f090 R08: ffffffffffffffff R09: 0000000042795000 [ 77.134749][ T4849] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000001 [ 77.134761][ T4849] R13: 00007f7290ba6038 R14: 00007f7290ba5fa0 R15: 00007ffd9b579648 [ 77.134780][ T4849] [ 77.347280][ T4846] macvlan2: entered promiscuous mode [ 77.376873][ T4846] bond0: entered promiscuous mode [ 77.392140][ T4846] bond_slave_0: entered promiscuous mode [ 77.419728][ T4857] FAULT_INJECTION: forcing a failure. [ 77.419728][ T4857] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 77.474630][ T4846] bond_slave_1: entered promiscuous mode [ 77.485273][ T4846] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 77.500726][ T4836] mmap: syz.1.404 (4836) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.512713][ T35] infiniband syz1: ib_query_port failed (-19) [ 77.526592][ T4857] CPU: 1 UID: 0 PID: 4857 Comm: syz.0.410 Tainted: G W syzkaller #0 PREEMPT(full) [ 77.526626][ T4857] Tainted: [W]=WARN [ 77.526707][ T4857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 77.526720][ T4857] Call Trace: [ 77.526727][ T4857] [ 77.526735][ T4857] __dump_stack+0x1d/0x30 [ 77.526841][ T4857] dump_stack_lvl+0x95/0xd0 [ 77.526862][ T4857] dump_stack+0x15/0x1b [ 77.526879][ T4857] should_fail_ex+0x263/0x280 [ 77.526906][ T4857] should_fail_alloc_page+0xf2/0x100 [ 77.527000][ T4857] __alloc_frozen_pages_noprof+0x108/0x360 [ 77.527031][ T4857] alloc_pages_mpol+0xb3/0x260 [ 77.527057][ T4857] folio_alloc_mpol_noprof+0x39/0x80 [ 77.527145][ T4857] shmem_get_folio_gfp+0x3da/0xd60 [ 77.527170][ T4857] ? simple_xattr_get+0xb5/0x150 [ 77.527198][ T4857] shmem_write_begin+0xfc/0x1f0 [ 77.527226][ T4857] generic_perform_write+0x183/0x490 [ 77.527250][ T4857] ? current_time+0x188/0x240 [ 77.527274][ T4857] shmem_file_write_iter+0xc5/0xf0 [ 77.527299][ T4857] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 77.527332][ T4857] vfs_write+0x5a6/0x9f0 [ 77.527350][ T4857] ksys_write+0xdc/0x1a0 [ 77.527365][ T4857] __x64_sys_write+0x40/0x50 [ 77.527397][ T4857] x64_sys_call+0x27e1/0x3020 [ 77.527419][ T4857] do_syscall_64+0x12c/0x370 [ 77.527442][ T4857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.527469][ T4857] RIP: 0033:0x7f72908ed04e [ 77.527482][ T4857] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 77.527501][ T4857] RSP: 002b:00007f728f35dda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.527518][ T4857] RAX: ffffffffffffffda RBX: 00007f728f35e6c0 RCX: 00007f72908ed04e [ 77.527528][ T4857] RDX: 0000000000080000 RSI: 00007f7286f3e000 RDI: 0000000000000005 [ 77.527538][ T4857] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.527578][ T4857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 77.527588][ T4857] R13: 00007f728f35dee0 R14: 00007f728f35dea0 R15: 00007f7286f3e000 [ 77.527602][ T4857] [ 77.772933][ T4862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.412'. [ 77.782734][ T4862] netlink: 72 bytes leftover after parsing attributes in process `syz.4.412'. [ 77.791856][ T4862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.412'. [ 77.827512][ T28] audit: type=1400 audit(1774838528.603:540): avc: denied { create } for pid=4863 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 77.906512][ T28] audit: type=1400 audit(1774838528.603:541): avc: denied { read } for pid=4863 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 77.925680][ T28] audit: type=1400 audit(1774838528.603:542): avc: denied { ioctl } for pid=4863 comm="syz.1.413" path="socket:[9390]" dev="sockfs" ino=9390 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 78.063941][ T4871] wireguard0: entered promiscuous mode [ 78.069471][ T4871] wireguard0: entered allmulticast mode [ 78.120533][ T4875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'. [ 78.137855][ T4876] loop0: detected capacity change from 0 to 256 [ 78.171563][ T4876] netlink: 68 bytes leftover after parsing attributes in process `syz.0.414'. [ 78.241154][ T28] audit: type=1400 audit(1774838529.013:543): avc: denied { read append } for pid=4865 comm="syz.0.414" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 78.421284][ T4880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 78.516284][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.025964][ T4880] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.033274][ T4880] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.387090][ T4909] loop2: detected capacity change from 0 to 2048 [ 80.416117][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 80.451700][ T4909] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.556233][ T4909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.854872][ T4917] loop4: detected capacity change from 0 to 1024 [ 80.894834][ T4917] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 80.946546][ T4917] JBD2: no valid journal superblock found [ 80.963773][ T4909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'. [ 80.978571][ T4917] EXT4-fs (loop4): Could not load journal inode [ 81.000674][ T4909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'. [ 81.142292][ T28] kauditd_printk_skb: 130 callbacks suppressed [ 81.142307][ T28] audit: type=1326 audit(1774838531.913:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4908 comm="syz.2.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f77fd8dc819 code=0x7ffc0000 [ 81.186217][ T4920] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 81.201891][ T4922] FAULT_INJECTION: forcing a failure. [ 81.201891][ T4922] name failslab, interval 1, probability 0, space 0, times 0 [ 81.215877][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.230779][ T4920] SELinux: failed to load policy [ 81.250710][ T4922] CPU: 0 UID: 0 PID: 4922 Comm: syz.0.431 Tainted: G W syzkaller #0 PREEMPT(full) [ 81.250738][ T4922] Tainted: [W]=WARN [ 81.250745][ T4922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 81.250757][ T4922] Call Trace: [ 81.250764][ T4922] [ 81.250772][ T4922] __dump_stack+0x1d/0x30 [ 81.250798][ T4922] dump_stack_lvl+0x95/0xd0 [ 81.250820][ T4922] dump_stack+0x15/0x1b [ 81.250839][ T4922] should_fail_ex+0x263/0x280 [ 81.250860][ T4922] should_failslab+0x8c/0xb0 [ 81.250877][ T4922] kmem_cache_alloc_noprof+0x66/0x400 [ 81.250900][ T4922] ? vm_area_alloc+0x2c/0xb0 [ 81.250923][ T4922] vm_area_alloc+0x2c/0xb0 [ 81.250942][ T4922] mmap_region+0x11ce/0x2050 [ 81.250977][ T4922] do_mmap+0x9b2/0xbd0 [ 81.251005][ T4922] vm_mmap_pgoff+0x183/0x2d0 [ 81.251030][ T4922] ksys_mmap_pgoff+0xc1/0x310 [ 81.251054][ T4922] ? __x64_sys_mmap+0x49/0x70 [ 81.251073][ T4922] x64_sys_call+0x14df/0x3020 [ 81.251098][ T4922] do_syscall_64+0x12c/0x370 [ 81.251124][ T4922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.251142][ T4922] RIP: 0033:0x7f729092c819 [ 81.251155][ T4922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.251169][ T4922] RSP: 002b:00007f728f37f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 81.251189][ T4922] RAX: ffffffffffffffda RBX: 00007f7290ba5fa0 RCX: 00007f729092c819 [ 81.251203][ T4922] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000 [ 81.251216][ T4922] RBP: 00007f728f37f090 R08: ffffffffffffffff R09: 0000000042795000 [ 81.251229][ T4922] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000001 [ 81.251240][ T4922] R13: 00007f7290ba6038 R14: 00007f7290ba5fa0 R15: 00007ffd9b579648 [ 81.251255][ T4922] [ 81.623188][ T4939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.439'. [ 81.746435][ T4958] FAULT_INJECTION: forcing a failure. [ 81.746435][ T4958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.760020][ T4958] CPU: 0 UID: 0 PID: 4958 Comm: syz.4.446 Tainted: G W syzkaller #0 PREEMPT(full) [ 81.760128][ T4958] Tainted: [W]=WARN [ 81.760135][ T4958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 81.760146][ T4958] Call Trace: [ 81.760152][ T4958] [ 81.760160][ T4958] __dump_stack+0x1d/0x30 [ 81.760185][ T4958] dump_stack_lvl+0x95/0xd0 [ 81.760205][ T4958] dump_stack+0x15/0x1b [ 81.760228][ T4958] should_fail_ex+0x263/0x280 [ 81.760286][ T4958] should_fail+0xb/0x20 [ 81.760308][ T4958] should_fail_usercopy+0x1a/0x20 [ 81.760331][ T4958] _copy_to_user+0x20/0xa0 [ 81.760389][ T4958] simple_read_from_buffer+0xb5/0x130 [ 81.760410][ T4958] proc_fail_nth_read+0x10e/0x150 [ 81.760514][ T4958] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 81.760616][ T4958] vfs_read+0x1ab/0x7f0 [ 81.760631][ T4958] ? __rcu_read_unlock+0x4e/0x70 [ 81.760651][ T4958] ? __fget_files+0x184/0x1c0 [ 81.760747][ T4958] ? mutex_lock+0x57/0x90 [ 81.760763][ T4958] ksys_read+0xdc/0x1a0 [ 81.760779][ T4958] __x64_sys_read+0x40/0x50 [ 81.760794][ T4958] x64_sys_call+0x2886/0x3020 [ 81.760818][ T4958] do_syscall_64+0x12c/0x370 [ 81.760850][ T4958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.760867][ T4958] RIP: 0033:0x7fa33d23d04e [ 81.760887][ T4958] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 81.760924][ T4958] RSP: 002b:00007fa33bcd6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 81.760945][ T4958] RAX: ffffffffffffffda RBX: 00007fa33bcd76c0 RCX: 00007fa33d23d04e [ 81.760957][ T4958] RDX: 000000000000000f RSI: 00007fa33bcd70a0 RDI: 0000000000000005 [ 81.760967][ T4958] RBP: 00007fa33bcd7090 R08: 0000000000000000 R09: 0000000000000000 [ 81.760979][ T4958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.760992][ T4958] R13: 00007fa33d4f6038 R14: 00007fa33d4f5fa0 R15: 00007ffc13f32298 [ 81.761011][ T4958] [ 81.761041][ T4956] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.883312][ T28] audit: type=1400 audit(1774838532.663:675): avc: denied { setopt } for pid=4960 comm="syz.4.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.921326][ T4962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.995361][ T4962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.044254][ T4956] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.085181][ T4963] loop4: detected capacity change from 0 to 512 [ 82.107552][ T4969] xfrm1: entered promiscuous mode [ 82.115089][ T4956] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.133770][ T4969] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.146930][ T4963] EXT4-fs (loop4): 1 orphan inode deleted [ 82.154232][ T4963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.168347][ T4956] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.181847][ T4969] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.198730][ T4971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.208551][ T4971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.224772][ T1409] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.273185][ T4969] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.284634][ T1409] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.292992][ T1409] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.301536][ T1409] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.329107][ T4969] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.458805][ T1409] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.472076][ T1409] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.485171][ T1409] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.497576][ T1409] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.577625][ T4980] loop2: detected capacity change from 0 to 512 [ 82.596980][ T4980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.612681][ T4980] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.687048][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.794433][ T4963] Set syz1 is full, maxelem 65536 reached [ 82.812928][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.842530][ T28] audit: type=1400 audit(1774838533.623:676): avc: denied { create } for pid=4988 comm="syz.4.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 82.872819][ T28] audit: type=1400 audit(1774838533.623:677): avc: denied { ioctl } for pid=4988 comm="syz.4.455" path="socket:[9493]" dev="sockfs" ino=9493 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 82.928525][ T28] audit: type=1400 audit(1774838533.643:678): avc: denied { getattr } for pid=4988 comm="syz.4.455" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9498 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.953605][ T28] audit: type=1400 audit(1774838533.653:679): avc: denied { create } for pid=4988 comm="syz.4.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 82.973732][ T28] audit: type=1400 audit(1774838533.653:680): avc: denied { ioctl } for pid=4988 comm="syz.4.455" path="socket:[9504]" dev="sockfs" ino=9504 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.000676][ T4996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'. [ 83.138454][ T5002] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 83.157627][ T5002] SELinux: failed to load policy [ 83.218896][ T5005] loop4: detected capacity change from 0 to 1024 [ 83.227489][ T5005] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 83.227489][ T5005] [ 83.246374][ T5005] SET target dimension over the limit! [ 83.283807][ T5005] netlink: 16146 bytes leftover after parsing attributes in process `syz.4.462'. [ 83.312230][ T5011] netlink: 16 bytes leftover after parsing attributes in process `syz.3.464'. [ 83.335946][ T5011] netlink: 16 bytes leftover after parsing attributes in process `syz.3.464'. [ 83.369192][ T5011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 83.382494][ T5005] loop4: detected capacity change from 0 to 1024 [ 83.382805][ T5017] FAULT_INJECTION: forcing a failure. [ 83.382805][ T5017] name failslab, interval 1, probability 0, space 0, times 0 [ 83.403128][ T5011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 83.416007][ T5005] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.427072][ T5017] CPU: 0 UID: 0 PID: 5017 Comm: syz.1.467 Tainted: G W syzkaller #0 PREEMPT(full) [ 83.427101][ T5017] Tainted: [W]=WARN [ 83.427107][ T5017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 83.427116][ T5017] Call Trace: [ 83.427121][ T5017] [ 83.427127][ T5017] __dump_stack+0x1d/0x30 [ 83.427149][ T5017] dump_stack_lvl+0x95/0xd0 [ 83.427168][ T5017] dump_stack+0x15/0x1b [ 83.427189][ T5017] should_fail_ex+0x263/0x280 [ 83.427215][ T5017] should_failslab+0x8c/0xb0 [ 83.427236][ T5017] kmem_cache_alloc_noprof+0x66/0x400 [ 83.427257][ T5017] ? vm_area_dup+0x33/0x2c0 [ 83.427277][ T5017] vm_area_dup+0x33/0x2c0 [ 83.427299][ T5017] __split_vma+0xe9/0x640 [ 83.427320][ T5017] ? mas_find+0x5d5/0x700 [ 83.427341][ T5017] vms_gather_munmap_vmas+0x2bc/0x850 [ 83.427369][ T5017] mmap_region+0x718/0x2050 [ 83.427388][ T5017] ? selinux_file_open+0x2e6/0x330 [ 83.427432][ T5017] do_mmap+0x9b2/0xbd0 [ 83.427454][ T5017] vm_mmap_pgoff+0x183/0x2d0 [ 83.427475][ T5017] ksys_mmap_pgoff+0xc1/0x310 [ 83.427500][ T5017] ? __x64_sys_mmap+0x49/0x70 [ 83.427518][ T5017] x64_sys_call+0x14df/0x3020 [ 83.427540][ T5017] do_syscall_64+0x12c/0x370 [ 83.427560][ T5017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.427577][ T5017] RIP: 0033:0x7fe270dfc819 [ 83.427591][ T5017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.427604][ T5017] RSP: 002b:00007fe26f857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 83.427622][ T5017] RAX: ffffffffffffffda RBX: 00007fe271075fa0 RCX: 00007fe270dfc819 [ 83.427635][ T5017] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000 [ 83.427648][ T5017] RBP: 00007fe26f857090 R08: ffffffffffffffff R09: 0000000042795000 [ 83.427661][ T5017] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000001 [ 83.427674][ T5017] R13: 00007fe271076038 R14: 00007fe271075fa0 R15: 00007fff6bd9fa38 [ 83.427693][ T5017] [ 83.751169][ T5021] loop3: detected capacity change from 0 to 256 [ 83.811473][ T5005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 83.845798][ T5005] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.860399][ T5021] FAT-fs (loop3): Directory bread(block 1285) failed [ 83.869849][ T5021] FAT-fs (loop3): Directory bread(block 1286) failed [ 83.876918][ T5026] loop2: detected capacity change from 0 to 1764 [ 83.877012][ T5021] FAT-fs (loop3): Directory bread(block 1287) failed [ 83.883715][ T5026] iso9660: Unknown parameter 'utF8' [ 83.890466][ T5021] FAT-fs (loop3): Directory bread(block 1288) failed [ 83.911922][ T28] audit: type=1400 audit(1774838534.683:681): avc: denied { bind } for pid=5032 comm="syz.1.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.940650][ T28] audit: type=1400 audit(1774838534.683:682): avc: denied { listen } for pid=5032 comm="syz.1.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.963444][ T5021] FAT-fs (loop3): Directory bread(block 1285) failed [ 83.970477][ T5005] EXT4-fs error (device loop4): ext4_map_blocks:828: inode #15: comm syz.4.462: lblock 0 mapped to illegal pblock 0 (length 1) [ 83.972308][ T5021] FAT-fs (loop3): Directory bread(block 1286) failed [ 83.972331][ T5021] FAT-fs (loop3): Directory bread(block 1287) failed [ 83.972351][ T5021] FAT-fs (loop3): Directory bread(block 1288) failed [ 84.006895][ T28] audit: type=1400 audit(1774838534.733:683): avc: denied { connect } for pid=5034 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.028444][ T5035] loop1: detected capacity change from 0 to 512 [ 84.034750][ T5021] FAT-fs (loop3): Directory bread(block 1285) failed [ 84.043597][ T5021] FAT-fs (loop3): Directory bread(block 1286) failed [ 84.083354][ T5035] EXT4-fs (loop1): unable to read superblock [ 84.084115][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 84.227915][ T5046] loop1: detected capacity change from 0 to 512 [ 84.259722][ T5046] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.477: bad orphan inode 15 [ 84.270886][ T5046] loop1: lost filesystem error report for type 5 error -117 [ 84.271035][ T5046] ext4_test_bit(bit=14, block=5) = 0 [ 84.283668][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 84.283690][ C0] EXT4-fs (loop1): initial error at time 1774838535: ext4_orphan_get:1423 [ 84.283715][ C0] EXT4-fs (loop1): last error at time 1774838535: ext4_orphan_get:1423 [ 84.721104][ T5046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.743742][ T5046] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 84.812822][ T5046] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz.1.477: bit already cleared for inode 13 [ 84.835362][ T5055] EXT4-fs error (device loop1): __ext4_new_inode:1079: comm syz.1.477: reserved inode found cleared - inode=1 [ 84.835448][ T5054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'. [ 84.968982][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.132912][ T5069] FAULT_INJECTION: forcing a failure. [ 85.132912][ T5069] name failslab, interval 1, probability 0, space 0, times 0 [ 85.132944][ T5069] CPU: 1 UID: 0 PID: 5069 Comm: syz.4.484 Tainted: G W syzkaller #0 PREEMPT(full) [ 85.132971][ T5069] Tainted: [W]=WARN [ 85.132977][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 85.132988][ T5069] Call Trace: [ 85.132994][ T5069] [ 85.132999][ T5069] __dump_stack+0x1d/0x30 [ 85.133021][ T5069] dump_stack_lvl+0x95/0xd0 [ 85.133053][ T5069] dump_stack+0x15/0x1b [ 85.133078][ T5069] should_fail_ex+0x263/0x280 [ 85.133102][ T5069] should_failslab+0x8c/0xb0 [ 85.133124][ T5069] kmem_cache_alloc_noprof+0x66/0x400 [ 85.133147][ T5069] ? mas_alloc_nodes+0x1a2/0x210 [ 85.133169][ T5069] mas_alloc_nodes+0x1a2/0x210 [ 85.133187][ T5069] mas_preallocate+0x2ca/0x510 [ 85.133209][ T5069] __split_vma+0x240/0x640 [ 85.133226][ T5069] ? mas_find+0x5d5/0x700 [ 85.133248][ T5069] vms_gather_munmap_vmas+0x2bc/0x850 [ 85.133300][ T5069] mmap_region+0x718/0x2050 [ 85.133324][ T5069] ? selinux_file_open+0x2e6/0x330 [ 85.133370][ T5069] do_mmap+0x9b2/0xbd0 [ 85.133398][ T5069] vm_mmap_pgoff+0x183/0x2d0 [ 85.133424][ T5069] ksys_mmap_pgoff+0xc1/0x310 [ 85.133449][ T5069] ? __x64_sys_mmap+0x49/0x70 [ 85.133464][ T5069] x64_sys_call+0x14df/0x3020 [ 85.133484][ T5069] do_syscall_64+0x12c/0x370 [ 85.133508][ T5069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.133529][ T5069] RIP: 0033:0x7fa33d27c819 [ 85.133545][ T5069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.133560][ T5069] RSP: 002b:00007fa33bcd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 85.133576][ T5069] RAX: ffffffffffffffda RBX: 00007fa33d4f5fa0 RCX: 00007fa33d27c819 [ 85.133593][ T5069] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000 [ 85.133607][ T5069] RBP: 00007fa33bcd7090 R08: ffffffffffffffff R09: 0000000042795000 [ 85.133620][ T5069] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000001 [ 85.133633][ T5069] R13: 00007fa33d4f6038 R14: 00007fa33d4f5fa0 R15: 00007ffc13f32298 [ 85.133652][ T5069] [ 85.374690][ T5074] netlink: 'syz.1.485': attribute type 10 has an invalid length. [ 85.374727][ T5074] netlink: 55 bytes leftover after parsing attributes in process `syz.1.485'. [ 85.984214][ T5097] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.997033][ T5099] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 86.007794][ T5098] loop4: detected capacity change from 0 to 512 [ 86.021405][ T5098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.034937][ T5101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.051819][ T5098] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.055489][ T5101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.071764][ T5098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=5098 comm=syz.4.494 [ 86.085135][ T5098] netlink: 'syz.4.494': attribute type 1 has an invalid length. [ 86.095619][ T5097] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.175072][ T5097] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.275683][ T5097] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.328092][ T1409] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.338641][ T1409] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.349770][ T1409] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.361623][ T1409] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.783951][ T5108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.498'. [ 86.832769][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.987409][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 86.987422][ T28] audit: type=1400 audit(1774838537.763:691): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 87.035829][ T5128] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 87.087185][ T5138] loop1: detected capacity change from 0 to 512 [ 87.122350][ T5138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.136171][ T5138] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.161172][ T5142] FAULT_INJECTION: forcing a failure. [ 87.161172][ T5142] name failslab, interval 1, probability 0, space 0, times 0 [ 87.174107][ T5142] CPU: 1 UID: 0 PID: 5142 Comm: syz.2.511 Tainted: G W syzkaller #0 PREEMPT(full) [ 87.174133][ T5142] Tainted: [W]=WARN [ 87.174138][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.174148][ T5142] Call Trace: [ 87.174155][ T5142] [ 87.174162][ T5142] __dump_stack+0x1d/0x30 [ 87.174186][ T5142] dump_stack_lvl+0x95/0xd0 [ 87.174205][ T5142] dump_stack+0x15/0x1b [ 87.174222][ T5142] should_fail_ex+0x263/0x280 [ 87.174243][ T5142] should_failslab+0x8c/0xb0 [ 87.174263][ T5142] kmem_cache_alloc_noprof+0x66/0x400 [ 87.174279][ T5142] ? security_file_alloc+0x32/0xf0 [ 87.174291][ T5142] security_file_alloc+0x32/0xf0 [ 87.174302][ T5142] init_file+0x5b/0x1b0 [ 87.174316][ T5142] alloc_empty_file+0x8b/0x200 [ 87.174329][ T5142] alloc_file_pseudo+0xf6/0x190 [ 87.174344][ T5142] __shmem_file_setup+0x1dd/0x210 [ 87.174359][ T5142] shmem_zero_setup+0x66/0xe0 [ 87.174372][ T5142] mmap_region+0x178b/0x2050 [ 87.174396][ T5142] do_mmap+0x9b2/0xbd0 [ 87.174411][ T5142] vm_mmap_pgoff+0x183/0x2d0 [ 87.174424][ T5142] ksys_mmap_pgoff+0xc1/0x310 [ 87.174438][ T5142] ? __x64_sys_mmap+0x49/0x70 [ 87.174448][ T5142] x64_sys_call+0x14df/0x3020 [ 87.174461][ T5142] do_syscall_64+0x12c/0x370 [ 87.174476][ T5142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.174488][ T5142] RIP: 0033:0x7f77fd8dc819 [ 87.174498][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.174509][ T5142] RSP: 002b:00007f77fc337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 87.174521][ T5142] RAX: ffffffffffffffda RBX: 00007f77fdb55fa0 RCX: 00007f77fd8dc819 [ 87.174529][ T5142] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000 [ 87.174536][ T5142] RBP: 00007f77fc337090 R08: ffffffffffffffff R09: 0000000042795000 [ 87.174544][ T5142] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000002 [ 87.174551][ T5142] R13: 00007f77fdb56038 R14: 00007f77fdb55fa0 R15: 00007ffdba9ed328 [ 87.174561][ T5142] [ 87.175152][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.247151][ T5145] ip6gretap0: entered promiscuous mode [ 87.632862][ T5145] macvtap1: entered allmulticast mode [ 87.638276][ T5145] ip6gretap0: entered allmulticast mode [ 87.952956][ T5145] ip6gretap0: left allmulticast mode [ 87.966685][ T5145] ip6gretap0: left promiscuous mode [ 88.071805][ T5164] loop2: detected capacity change from 0 to 1024 [ 88.079183][ T5164] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 88.079183][ T5164] [ 88.103036][ T28] audit: type=1326 audit(1774838538.883:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5163 comm="syz.2.518" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77fd8dc819 code=0x0 [ 88.167420][ T5178] loop0: detected capacity change from 0 to 512 [ 88.171100][ T5173] lo speed is unknown, defaulting to 1000 [ 88.179778][ T5173] lo speed is unknown, defaulting to 1000 [ 88.197187][ T5178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.210025][ T5178] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.241215][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.567528][ T28] audit: type=1400 audit(1774838539.343:693): avc: denied { relabelfrom } for pid=5211 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 88.587601][ T28] audit: type=1400 audit(1774838539.343:694): avc: denied { relabelto } for pid=5211 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 88.760329][ T5218] FAULT_INJECTION: forcing a failure. [ 88.760329][ T5218] name failslab, interval 1, probability 0, space 0, times 0 [ 88.773826][ T5218] CPU: 1 UID: 0 PID: 5218 Comm: syz.0.533 Tainted: G W syzkaller #0 PREEMPT(full) [ 88.773853][ T5218] Tainted: [W]=WARN [ 88.773859][ T5218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.773869][ T5218] Call Trace: [ 88.773875][ T5218] [ 88.773881][ T5218] __dump_stack+0x1d/0x30 [ 88.773903][ T5218] dump_stack_lvl+0x95/0xd0 [ 88.773926][ T5218] dump_stack+0x15/0x1b [ 88.773945][ T5218] should_fail_ex+0x263/0x280 [ 88.773968][ T5218] should_failslab+0x8c/0xb0 [ 88.773997][ T5218] kmem_cache_alloc_noprof+0x66/0x400 [ 88.774019][ T5218] ? vm_area_alloc+0x2c/0xb0 [ 88.774039][ T5218] vm_area_alloc+0x2c/0xb0 [ 88.774060][ T5218] mmap_region+0x11ce/0x2050 [ 88.774097][ T5218] do_mmap+0x9b2/0xbd0 [ 88.774121][ T5218] vm_mmap_pgoff+0x183/0x2d0 [ 88.774141][ T5218] ksys_mmap_pgoff+0xc1/0x310 [ 88.774161][ T5218] ? __x64_sys_mmap+0x49/0x70 [ 88.774177][ T5218] x64_sys_call+0x14df/0x3020 [ 88.774201][ T5218] do_syscall_64+0x12c/0x370 [ 88.774227][ T5218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.774248][ T5218] RIP: 0033:0x7f729092c819 [ 88.774263][ T5218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.774280][ T5218] RSP: 002b:00007f728f37f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 88.774297][ T5218] RAX: ffffffffffffffda RBX: 00007f7290ba5fa0 RCX: 00007f729092c819 [ 88.774308][ T5218] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000 [ 88.774318][ T5218] RBP: 00007f728f37f090 R08: ffffffffffffffff R09: 0000000042795000 [ 88.774330][ T5218] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000001 [ 88.774340][ T5218] R13: 00007f7290ba6038 R14: 00007f7290ba5fa0 R15: 00007ffd9b579648 [ 88.774359][ T5218] [ 89.238986][ T5220] loop0: detected capacity change from 0 to 1024 [ 89.331594][ T5220] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 89.378756][ T5229] loop3: detected capacity change from 0 to 512 [ 89.391837][ T5231] loop2: detected capacity change from 0 to 1024 [ 89.412040][ T5220] JBD2: no valid journal superblock found [ 89.417783][ T5220] EXT4-fs (loop0): Could not load journal inode [ 89.438310][ T5231] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 89.438310][ T5231] [ 89.460957][ T5229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.478512][ T5229] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.966997][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.992339][ T5235] loop4: detected capacity change from 0 to 512 [ 90.012146][ T5231] SET target dimension over the limit! [ 90.036645][ T5235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.054296][ T5235] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.065013][ T5237] loop3: detected capacity change from 0 to 1024 [ 90.081002][ T5237] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 90.081002][ T5237] [ 90.085935][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.110689][ T5231] netlink: 16146 bytes leftover after parsing attributes in process `syz.2.539'. [ 90.128623][ T5237] Cannot find add_set index 0 as target [ 90.144233][ T5237] netlink: 16146 bytes leftover after parsing attributes in process `syz.3.540'. [ 90.226477][ T5237] loop3: detected capacity change from 0 to 1024 [ 90.254557][ T5248] FAULT_INJECTION: forcing a failure. [ 90.254557][ T5248] name failslab, interval 1, probability 0, space 0, times 0 [ 90.263284][ T5237] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.267565][ T5248] CPU: 0 UID: 0 PID: 5248 Comm: syz.1.546 Tainted: G W syzkaller #0 PREEMPT(full) [ 90.267596][ T5248] Tainted: [W]=WARN [ 90.267603][ T5248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.267615][ T5248] Call Trace: [ 90.267621][ T5248] [ 90.267628][ T5248] __dump_stack+0x1d/0x30 [ 90.267654][ T5248] dump_stack_lvl+0x95/0xd0 [ 90.267672][ T5248] dump_stack+0x15/0x1b [ 90.267693][ T5248] should_fail_ex+0x263/0x280 [ 90.267720][ T5248] should_failslab+0x8c/0xb0 [ 90.267742][ T5248] kmem_cache_alloc_noprof+0x66/0x400 [ 90.267764][ T5248] ? mas_alloc_nodes+0x1a2/0x210 [ 90.267785][ T5248] mas_alloc_nodes+0x1a2/0x210 [ 90.267806][ T5248] mas_preallocate+0x2ca/0x510 [ 90.267833][ T5248] mmap_region+0x139e/0x2050 [ 90.267877][ T5248] do_mmap+0x9b2/0xbd0 [ 90.267906][ T5248] vm_mmap_pgoff+0x183/0x2d0 [ 90.267931][ T5248] ksys_mmap_pgoff+0xc1/0x310 [ 90.267953][ T5248] ? __x64_sys_mmap+0x49/0x70 [ 90.267971][ T5248] x64_sys_call+0x14df/0x3020 [ 90.267996][ T5248] do_syscall_64+0x12c/0x370 [ 90.268021][ T5248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.268041][ T5248] RIP: 0033:0x7fe270dfc819 [ 90.268056][ T5248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.268072][ T5248] RSP: 002b:00007fe26f857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 90.268092][ T5248] RAX: ffffffffffffffda RBX: 00007fe271075fa0 RCX: 00007fe270dfc819 [ 90.268105][ T5248] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000 [ 90.268116][ T5248] RBP: 00007fe26f857090 R08: ffffffffffffffff R09: 0000000042795000 [ 90.268137][ T5248] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000001 [ 90.268150][ T5248] R13: 00007fe271076038 R14: 00007fe271075fa0 R15: 00007fff6bd9fa38 [ 90.268169][ T5248] [ 90.309089][ T5244] loop2: detected capacity change from 0 to 1024 [ 90.898205][ T5244] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.909285][ T28] audit: type=1400 audit(1774838541.673:695): avc: denied { firmware_load } for pid=5245 comm="syz.0.545" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 90.949284][ T5257] netlink: 52 bytes leftover after parsing attributes in process `syz.0.545'. [ 90.958263][ T5257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.545'. [ 91.059857][ T5237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 91.188598][ T5237] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.203711][ T5244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 91.217500][ T5244] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.231973][ T5264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.548'. [ 91.287666][ T5231] EXT4-fs error (device loop2): ext4_map_blocks:828: inode #15: comm syz.2.539: lblock 0 mapped to illegal pblock 0 (length 1) [ 91.308785][ T5237] EXT4-fs error (device loop3): ext4_map_blocks:828: inode #15: comm syz.3.540: lblock 0 mapped to illegal pblock 0 (length 1) [ 91.371475][ T28] audit: type=1400 audit(1774838542.153:696): avc: denied { ioctl } for pid=5271 comm="syz.4.552" path="socket:[11898]" dev="sockfs" ino=11898 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.401701][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 91.407583][ T5270] loop0: detected capacity change from 0 to 2048 [ 91.417516][ T5270] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.448487][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 91.471770][ T5270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.549940][ T5280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 91.556674][ T28] audit: type=1326 audit(1774838542.303:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.0.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729092c819 code=0x7ffc0000 [ 91.573163][ T5280] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 91.588233][ T5280] audit: backlog limit exceeded [ 91.603470][ T5283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.551'. [ 91.615740][ T5270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.551'. [ 91.815840][ T5285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.873300][ T5285] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.043705][ T5295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.067177][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.080474][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.080942][ T5295] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.124303][ T5295] FAULT_INJECTION: forcing a failure. [ 92.124303][ T5295] name failslab, interval 1, probability 0, space 0, times 0 [ 92.140373][ T5295] CPU: 1 UID: 0 PID: 5295 Comm: syz.2.557 Tainted: G W syzkaller #0 PREEMPT(full) [ 92.140422][ T5295] Tainted: [W]=WARN [ 92.140429][ T5295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 92.140441][ T5295] Call Trace: [ 92.140448][ T5295] [ 92.140456][ T5295] __dump_stack+0x1d/0x30 [ 92.140515][ T5295] dump_stack_lvl+0x95/0xd0 [ 92.140537][ T5295] dump_stack+0x15/0x1b [ 92.140562][ T5295] should_fail_ex+0x263/0x280 [ 92.140629][ T5295] should_failslab+0x8c/0xb0 [ 92.140697][ T5295] kmem_cache_alloc_noprof+0x66/0x400 [ 92.140719][ T5295] ? do_getname_kernel+0x53/0x190 [ 92.140741][ T5295] do_getname_kernel+0x53/0x190 [ 92.140763][ T5295] kern_path+0x23/0xf0 [ 92.140847][ T5295] lookup_bdev+0x66/0x150 [ 92.140872][ T5295] __se_sys_quotactl+0x19a/0x660 [ 92.140923][ T5295] __x64_sys_quotactl+0x55/0x70 [ 92.140942][ T5295] x64_sys_call+0x1a2a/0x3020 [ 92.140966][ T5295] do_syscall_64+0x12c/0x370 [ 92.140993][ T5295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.141086][ T5295] RIP: 0033:0x7f77fd8dc819 [ 92.141100][ T5295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.141115][ T5295] RSP: 002b:00007f77fc337028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 92.141172][ T5295] RAX: ffffffffffffffda RBX: 00007f77fdb55fa0 RCX: 00007f77fd8dc819 [ 92.141185][ T5295] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffff80000801 [ 92.141196][ T5295] RBP: 00007f77fc337090 R08: 0000000000000000 R09: 0000000000000000 [ 92.141207][ T5295] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 92.141219][ T5295] R13: 00007f77fdb56038 R14: 00007f77fdb55fa0 R15: 00007ffdba9ed328 [ 92.141236][ T5295] [ 92.367989][ T5299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.556'. [ 92.377626][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.436370][ T5311] netlink: 2 bytes leftover after parsing attributes in process `syz.0.562'. [ 92.473861][ T5313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'. [ 92.539027][ T5319] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 92.549811][ T5319] JBD2: no valid journal superblock found [ 92.558435][ T5319] EXT4-fs (loop3): Could not load journal inode [ 92.611453][ T5325] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 92.625625][ T5325] JBD2: no valid journal superblock found [ 92.632202][ T5325] EXT4-fs (loop3): Could not load journal inode [ 92.802989][ T5337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.815776][ T5337] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.845281][ T5342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5342 comm=syz.0.573 [ 93.220101][ T5348] set_capacity_and_notify: 5 callbacks suppressed [ 93.220169][ T5348] loop4: detected capacity change from 0 to 512 [ 93.254256][ T5350] netlink: 'syz.2.576': attribute type 1 has an invalid length. [ 93.267893][ T5350] bond1: entered promiscuous mode [ 93.274005][ T5350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.289143][ T5350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=5350 comm=syz.2.576 [ 93.303562][ T5348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.360641][ T5348] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.371871][ T5348] FAULT_INJECTION: forcing a failure. [ 93.371871][ T5348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.385376][ T5348] CPU: 0 UID: 0 PID: 5348 Comm: syz.4.575 Tainted: G W syzkaller #0 PREEMPT(full) [ 93.385408][ T5348] Tainted: [W]=WARN [ 93.385416][ T5348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 93.385429][ T5348] Call Trace: [ 93.385435][ T5348] [ 93.385519][ T5348] __dump_stack+0x1d/0x30 [ 93.385543][ T5348] dump_stack_lvl+0x95/0xd0 [ 93.385561][ T5348] dump_stack+0x15/0x1b [ 93.385579][ T5348] should_fail_ex+0x263/0x280 [ 93.385601][ T5348] should_fail+0xb/0x20 [ 93.385669][ T5348] should_fail_usercopy+0x1a/0x20 [ 93.385748][ T5348] _copy_from_user+0x1c/0xb0 [ 93.385843][ T5348] quota_setquota+0x89/0x400 [ 93.385868][ T5348] do_quotactl+0x5ba/0x670 [ 93.385896][ T5348] __se_sys_quotactl+0x1f5/0x660 [ 93.385934][ T5348] __x64_sys_quotactl+0x55/0x70 [ 93.385979][ T5348] x64_sys_call+0x1a2a/0x3020 [ 93.386005][ T5348] do_syscall_64+0x12c/0x370 [ 93.386027][ T5348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.386047][ T5348] RIP: 0033:0x7fa33d27c819 [ 93.386064][ T5348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.386093][ T5348] RSP: 002b:00007fa33bcd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 93.386110][ T5348] RAX: ffffffffffffffda RBX: 00007fa33d4f5fa0 RCX: 00007fa33d27c819 [ 93.386125][ T5348] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffff80000801 [ 93.386141][ T5348] RBP: 00007fa33bcd7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.386155][ T5348] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 93.386169][ T5348] R13: 00007fa33d4f6038 R14: 00007fa33d4f5fa0 R15: 00007ffc13f32298 [ 93.386260][ T5348] [ 93.588689][ T5357] loop1: detected capacity change from 0 to 512 [ 93.601693][ T5357] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.613088][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.649753][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.795552][ T28] kauditd_printk_skb: 119 callbacks suppressed [ 93.795614][ T28] audit: type=1400 audit(1774838544.553:817): avc: denied { bind } for pid=5368 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 93.858994][ T5373] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 93.879510][ T28] audit: type=1400 audit(1774838544.553:818): avc: denied { append } for pid=5368 comm="syz.0.584" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.890741][ T5373] SELinux: failed to load policy [ 93.936636][ T5377] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 93.944685][ T5377] SELinux: failed to load policy [ 94.017297][ T5386] loop4: detected capacity change from 0 to 256 [ 94.031108][ T5383] xfrm1: entered promiscuous mode [ 94.046416][ T5386] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.076775][ T5383] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.130036][ T5387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.165679][ T5392] loop1: detected capacity change from 0 to 512 [ 94.174394][ T5387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.215767][ T5383] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.228485][ T5392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.241392][ T5392] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.252630][ T5392] FAULT_INJECTION: forcing a failure. [ 94.252630][ T5392] name failslab, interval 1, probability 0, space 0, times 0 [ 94.265579][ T5392] CPU: 1 UID: 0 PID: 5392 Comm: syz.1.592 Tainted: G W syzkaller #0 PREEMPT(full) [ 94.265743][ T5392] Tainted: [W]=WARN [ 94.265750][ T5392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.265764][ T5392] Call Trace: [ 94.265770][ T5392] [ 94.265779][ T5392] __dump_stack+0x1d/0x30 [ 94.265879][ T5392] dump_stack_lvl+0x95/0xd0 [ 94.265901][ T5392] dump_stack+0x15/0x1b [ 94.265923][ T5392] should_fail_ex+0x263/0x280 [ 94.265950][ T5392] should_failslab+0x8c/0xb0 [ 94.265994][ T5392] kmem_cache_alloc_noprof+0x66/0x400 [ 94.266017][ T5392] ? dquot_alloc+0x26/0x30 [ 94.266048][ T5392] dquot_alloc+0x26/0x30 [ 94.266075][ T5392] dqget+0x2b5/0x8c0 [ 94.266151][ T5392] dquot_set_dqblk+0x2b/0x890 [ 94.266184][ T5392] quota_setquota+0x3d0/0x400 [ 94.266213][ T5392] do_quotactl+0x5ba/0x670 [ 94.266236][ T5392] __se_sys_quotactl+0x1f5/0x660 [ 94.266264][ T5392] __x64_sys_quotactl+0x55/0x70 [ 94.266288][ T5392] x64_sys_call+0x1a2a/0x3020 [ 94.266387][ T5392] do_syscall_64+0x12c/0x370 [ 94.266413][ T5392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.266496][ T5392] RIP: 0033:0x7fe270dfc819 [ 94.266517][ T5392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.266535][ T5392] RSP: 002b:00007fe26f857028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 94.266554][ T5392] RAX: ffffffffffffffda RBX: 00007fe271075fa0 RCX: 00007fe270dfc819 [ 94.266603][ T5392] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffff80000801 [ 94.266661][ T5392] RBP: 00007fe26f857090 R08: 0000000000000000 R09: 0000000000000000 [ 94.266676][ T5392] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 94.266690][ T5392] R13: 00007fe271076038 R14: 00007fe271075fa0 R15: 00007fff6bd9fa38 [ 94.266706][ T5392] [ 94.461952][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.486952][ T5383] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.528438][ T28] audit: type=1400 audit(1774838545.303:819): avc: denied { write } for pid=5395 comm="syz.1.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.566140][ T5398] loop4: detected capacity change from 0 to 1024 [ 94.576142][ T5383] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.590440][ T5398] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 94.610315][ T5398] JBD2: no valid journal superblock found [ 94.620762][ T5398] EXT4-fs (loop4): Could not load journal inode [ 94.659349][ T28] audit: type=1400 audit(1774838545.433:820): avc: denied { watch } for pid=5402 comm="syz.1.597" path="/111" dev="tmpfs" ino=596 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 94.682310][ T295] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.690794][ T295] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.699499][ T295] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.711617][ T5405] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 94.719672][ T295] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.728042][ T28] audit: type=1400 audit(1774838545.473:821): avc: denied { bind } for pid=5402 comm="syz.1.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.751101][ T5405] SELinux: failed to load policy [ 94.893074][ T5424] loop2: detected capacity change from 0 to 512 [ 94.913053][ T5420] FAULT_INJECTION: forcing a failure. [ 94.913053][ T5420] name failslab, interval 1, probability 0, space 0, times 0 [ 94.925852][ T5420] CPU: 1 UID: 0 PID: 5420 Comm: syz.1.605 Tainted: G W syzkaller #0 PREEMPT(full) [ 94.925881][ T5420] Tainted: [W]=WARN [ 94.925886][ T5420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.925897][ T5420] Call Trace: [ 94.925904][ T5420] [ 94.925911][ T5420] __dump_stack+0x1d/0x30 [ 94.925934][ T5420] dump_stack_lvl+0x95/0xd0 [ 94.925954][ T5420] dump_stack+0x15/0x1b [ 94.925973][ T5420] should_fail_ex+0x263/0x280 [ 94.925997][ T5420] should_failslab+0x8c/0xb0 [ 94.926018][ T5420] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 94.926040][ T5420] ? __d_alloc+0x37/0x340 [ 94.926067][ T5420] __d_alloc+0x37/0x340 [ 94.926092][ T5420] d_alloc_pseudo+0x1e/0x80 [ 94.926118][ T5420] alloc_file_pseudo+0x91/0x190 [ 94.926141][ T5420] __shmem_file_setup+0x1dd/0x210 [ 94.926162][ T5420] shmem_zero_setup+0x66/0xe0 [ 94.926182][ T5420] mmap_region+0x178b/0x2050 [ 94.926220][ T5420] do_mmap+0x9b2/0xbd0 [ 94.926247][ T5420] vm_mmap_pgoff+0x183/0x2d0 [ 94.926271][ T5420] ksys_mmap_pgoff+0xc1/0x310 [ 94.926296][ T5420] ? __x64_sys_mmap+0x49/0x70 [ 94.926314][ T5420] x64_sys_call+0x14df/0x3020 [ 94.926338][ T5420] do_syscall_64+0x12c/0x370 [ 94.926363][ T5420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.926384][ T5420] RIP: 0033:0x7fe270dfc819 [ 94.926397][ T5420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.926412][ T5420] RSP: 002b:00007fe26f857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 94.926431][ T5420] RAX: ffffffffffffffda RBX: 00007fe271075fa0 RCX: 00007fe270dfc819 [ 94.926445][ T5420] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000 [ 94.926458][ T5420] RBP: 00007fe26f857090 R08: ffffffffffffffff R09: 0000000042795000 [ 94.926472][ T5420] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000002 [ 94.926485][ T5420] R13: 00007fe271076038 R14: 00007fe271075fa0 R15: 00007fff6bd9fa38 [ 94.926503][ T5420] [ 95.131773][ T5422] siw: device registration error -23 [ 95.162114][ T5422] lo speed is unknown, defaulting to 1000 [ 95.168968][ T5422] lo speed is unknown, defaulting to 1000 [ 95.433339][ T5424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.446492][ T5424] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.453829][ T5434] loop1: detected capacity change from 0 to 1024 [ 95.463604][ T5424] FAULT_INJECTION: forcing a failure. [ 95.463604][ T5424] name failslab, interval 1, probability 0, space 0, times 0 [ 95.476442][ T5424] CPU: 0 UID: 0 PID: 5424 Comm: syz.2.606 Tainted: G W syzkaller #0 PREEMPT(full) [ 95.476538][ T5424] Tainted: [W]=WARN [ 95.476544][ T5424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 95.476557][ T5424] Call Trace: [ 95.476565][ T5424] [ 95.476573][ T5424] __dump_stack+0x1d/0x30 [ 95.476651][ T5424] dump_stack_lvl+0x95/0xd0 [ 95.476670][ T5424] dump_stack+0x15/0x1b [ 95.476689][ T5424] should_fail_ex+0x263/0x280 [ 95.476764][ T5424] should_failslab+0x8c/0xb0 [ 95.476784][ T5424] __kmalloc_noprof+0xb8/0x4e0 [ 95.476805][ T5424] ? find_tree_dqentry+0x3e/0x8c0 [ 95.476827][ T5424] find_tree_dqentry+0x3e/0x8c0 [ 95.476885][ T5424] ? __rcu_read_unlock+0x33/0x70 [ 95.476904][ T5424] ? avc_has_perm_noaudit+0xab/0x130 [ 95.476992][ T5424] qtree_read_dquot+0x35c/0x4a0 [ 95.477014][ T5424] v2_read_dquot+0x97/0xd0 [ 95.477032][ T5424] dquot_acquire+0xcd/0x2b0 [ 95.477092][ T5424] ext4_acquire_dquot+0x15f/0x200 [ 95.477158][ T5424] dqget+0x527/0x8c0 [ 95.477183][ T5424] dquot_set_dqblk+0x2b/0x890 [ 95.477212][ T5424] quota_setquota+0x3d0/0x400 [ 95.477350][ T5424] do_quotactl+0x5ba/0x670 [ 95.477370][ T5424] __se_sys_quotactl+0x1f5/0x660 [ 95.477392][ T5424] __x64_sys_quotactl+0x55/0x70 [ 95.477412][ T5424] x64_sys_call+0x1a2a/0x3020 [ 95.477483][ T5424] do_syscall_64+0x12c/0x370 [ 95.477562][ T5424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.477617][ T5424] RIP: 0033:0x7f77fd8dc819 [ 95.477632][ T5424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.477648][ T5424] RSP: 002b:00007f77fc337028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 95.477667][ T5424] RAX: ffffffffffffffda RBX: 00007f77fdb55fa0 RCX: 00007f77fd8dc819 [ 95.477705][ T5424] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffff80000801 [ 95.477717][ T5424] RBP: 00007f77fc337090 R08: 0000000000000000 R09: 0000000000000000 [ 95.477729][ T5424] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 95.477772][ T5424] R13: 00007f77fdb56038 R14: 00007f77fdb55fa0 R15: 00007ffdba9ed328 [ 95.477788][ T5424] [ 95.477823][ T5424] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 95.494368][ T5434] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 95.494368][ T5434] [ 95.502541][ T5424] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.606: Failed to acquire dquot type 1 [ 95.769086][ T5434] SET target dimension over the limit! [ 95.793207][ T5434] __nla_validate_parse: 9 callbacks suppressed [ 95.793263][ T5434] netlink: 16146 bytes leftover after parsing attributes in process `syz.1.608'. [ 95.811734][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.901715][ T5440] loop0: detected capacity change from 0 to 1024 [ 95.908261][ T28] audit: type=1400 audit(1774838546.673:822): avc: denied { create } for pid=5441 comm="syz.3.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 95.929664][ T5440] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 95.929664][ T5440] [ 95.950625][ T5440] SET target dimension over the limit! [ 95.972849][ T5445] team0 (unregistering): Port device team_slave_0 removed [ 95.985826][ T5434] loop1: detected capacity change from 0 to 1024 [ 96.004340][ T5445] team0 (unregistering): Port device team_slave_1 removed [ 96.018580][ T5434] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.029812][ T10] lo speed is unknown, defaulting to 1000 [ 96.048290][ T5440] netlink: 16146 bytes leftover after parsing attributes in process `syz.0.611'. [ 96.086336][ T5448] loop0: detected capacity change from 0 to 1024 [ 96.101102][ T5447] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 96.104481][ T5448] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.134447][ T5434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 96.135728][ T5447] bond0: (slave lo): Enslaving as an active interface with an up link [ 96.159277][ T5447] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 96.189059][ T5434] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.232427][ T5434] EXT4-fs error (device loop1): ext4_map_blocks:828: inode #15: comm syz.1.608: lblock 0 mapped to illegal pblock 0 (length 1) [ 96.250310][ T5448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 96.264303][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 96.275606][ T5448] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.341314][ T5456] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 96.367151][ T5456] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #17: comm syz.4.615: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 96.396634][ T5440] EXT4-fs error (device loop0): ext4_map_blocks:828: inode #15: comm syz.0.611: lblock 0 mapped to illegal pblock 0 (length 1) [ 96.410011][ T5456] loop4: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 96.410575][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 96.419270][ T5463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 96.419716][ C1] EXT4-fs (loop4): initial error at time 1774838547: ext4_ext_check_inode:521: inode 17 [ 96.419741][ C1] EXT4-fs (loop4): last error at time 1774838547: ext4_ext_check_inode:521: inode 17 [ 96.455386][ T5461] netlink: 20 bytes leftover after parsing attributes in process `syz.3.616'. [ 96.460699][ T5456] EXT4-fs (loop4): no journal found [ 96.529476][ T5461] lo speed is unknown, defaulting to 1000 [ 96.535672][ T5461] lo speed is unknown, defaulting to 1000 [ 96.572212][ T5466] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 96.575977][ T28] audit: type=1400 audit(1774838547.353:823): avc: denied { mac_admin } for pid=5459 comm="syz.3.616" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.701368][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 96.711043][ T28] audit: type=1400 audit(1774838547.353:824): avc: denied { create } for pid=5459 comm="syz.3.616" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 96.711864][ T28] audit: type=1400 audit(1774838547.353:825): avc: denied { associate } for pid=5459 comm="syz.3.616" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 96.854842][ T5477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 96.989347][ T5483] IPVS: set_ctl: invalid protocol: 58 172.20.20.53:20003 [ 97.013597][ T5485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 97.027466][ T5485] ip6gretap0: entered promiscuous mode [ 97.033358][ T5485] vlan2: entered promiscuous mode [ 97.685063][ T5501] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.703506][ T5503] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.722863][ T5503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.738633][ T5507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.750310][ T5507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.760520][ T5508] netlink: 'syz.4.631': attribute type 10 has an invalid length. [ 97.768301][ T5508] netlink: 40 bytes leftover after parsing attributes in process `syz.4.631'. [ 97.779642][ T5501] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.799883][ T5508] dummy0: entered promiscuous mode [ 97.818330][ T5508] dummy0: entered allmulticast mode [ 97.830221][ T5503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.629'. [ 97.841643][ T5508] bridge0: port 3(dummy0) entered blocking state [ 97.848137][ T5508] bridge0: port 3(dummy0) entered disabled state [ 97.855561][ T5503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.629'. [ 97.868052][ T5501] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.950807][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.065821][ T5501] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.116208][ T5525] ================================================================== [ 98.124322][ T5525] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry [ 98.131867][ T5525] [ 98.134192][ T5525] write to 0xffff88810493d200 of 8 bytes by task 5522 on cpu 0: [ 98.141820][ T5525] mas_wr_store_entry+0x20c5/0x2ed0 [ 98.147042][ T5525] mas_store_prealloc+0x72e/0xa70 [ 98.152068][ T5525] vma_complete+0x3c7/0x850 [ 98.156584][ T5525] __split_vma+0x593/0x640 [ 98.161089][ T5525] vma_modify+0xb2e/0xd00 [ 98.165432][ T5525] vma_modify_flags+0x182/0x210 [ 98.170299][ T5525] mprotect_fixup+0x312/0x5d0 [ 98.174977][ T5525] do_mprotect_pkey+0x67b/0x920 [ 98.179822][ T5525] __x64_sys_mprotect+0x48/0x60 [ 98.184755][ T5525] x64_sys_call+0x2768/0x3020 [ 98.189432][ T5525] do_syscall_64+0x12c/0x370 [ 98.194111][ T5525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.200100][ T5525] [ 98.202428][ T5525] read to 0xffff88810493d200 of 8 bytes by task 5525 on cpu 1: [ 98.209959][ T5525] mas_state_walk+0x485/0x650 [ 98.214634][ T5525] mas_walk+0x60/0x150 [ 98.218692][ T5525] lock_vma_under_rcu+0xc9/0x210 [ 98.223709][ T5525] do_user_addr_fault+0x232/0x1050 [ 98.228817][ T5525] exc_page_fault+0x62/0xa0 [ 98.233308][ T5525] asm_exc_page_fault+0x26/0x30 [ 98.238148][ T5525] [ 98.240479][ T5525] value changed: 0xffff88810493d10e -> 0xffff88810493d200 [ 98.247565][ T5525] [ 98.249872][ T5525] Reported by Kernel Concurrency Sanitizer on: [ 98.256006][ T5525] CPU: 1 UID: 0 PID: 5525 Comm: syz.3.637 Tainted: G W syzkaller #0 PREEMPT(full) [ 98.266844][ T5525] Tainted: [W]=WARN [ 98.270629][ T5525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 98.280670][ T5525] ================================================================== [ 98.320717][ T5528] set_capacity_and_notify: 3 callbacks suppressed [ 98.320735][ T5528] loop0: detected capacity change from 0 to 128 [ 98.390712][ T295] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.408342][ T295] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.422839][ T295] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.431244][ T295] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0