last executing test programs: 4.675803078s ago: executing program 2 (id=569): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000001a80)={0x6, 'pimreg0\x00', {}, 0x891e}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x1c, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x93}, 0xe) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x1401, 0x10, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x9040) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = socket$kcm(0x21, 0x2, 0x2) close(r5) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'veth0_to_hsr\x00', {0x4}, 0x2cd}) 3.804829594s ago: executing program 1 (id=574): socket$can_raw(0x1d, 0x3, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x800) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609093a140006"], 0x78}, 0x1, 0xffffffff00000003}, 0x2000800) sched_setscheduler(0x0, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, &(0x7f0000000380)={0x228, 0x8000000000000001, 0x0, 0x7}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r0, 0x0, 0x0, 0x8800000) io_setup(0x1, &(0x7f0000000b80)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 3.770411299s ago: executing program 2 (id=575): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x80020000, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800e00010069703665727370616e00000034000280060002003000000014000600fc020000000000000000000000000000140007"], 0x70}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x2800c40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6572726f72733d636fd0fc696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9b1639171d6afe513a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a28669dcd8db68def399", @ANYRESHEX=r0, @ANYRES8=r0], 0x5, 0x29b, &(0x7f0000000340)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) 3.562501684s ago: executing program 2 (id=577): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007"], 0x128}}, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000400)=@chain) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 3.419751768s ago: executing program 2 (id=578): pread64(0xffffffffffffffff, 0x0, 0x0, 0x2e1) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) lsm_set_self_attr(0x68, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x3, 0xca}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000005c0)=0x0) unshare(0x68040200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000000)=@IORING_OP_UNLINKAT={0x24, 0x12, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x742f, 0x77ae, 0x1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 2.86751695s ago: executing program 0 (id=582): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xf6e, 0x3, &(0x7f00000001c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff92, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="0300000843719a792bea9021176a68834f6520e5f9056c72db6667c9efb24d3b45ff960f34260cab398c7f6332997064b9a4ab60e666747e9fd4d560b71547ab03a4f88fb48f59b0a9622e02d6b194220bcbcc5da62e78ae90b0a690f0a5aea84b98d48fbab018ad2f52484f73a7e932c7c668deb1293859da27cae4136c59d057df2cb81e46e47e313c6e68292121424576b1f55e38d78aeadeba085fcd6c022dea36c8346e5227b9edce4cdbb562505d2380091e4fbbd645e39b5638486c4f671ecce0d1fda95876376f04b9329dfd84c8272b19be14dc9a1f4ff7b5ff876bb56795936223", @ANYRES16=r1, @ANYBLOB="110725bd7000fddbdf250500000005002e0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x4048014) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @loopback}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)={0x14, 0x78, 0x601, 0x0, 0x0, "", [@nested={0x4, 0x84}]}, 0x14}], 0x1, 0x0, 0x0, 0x200000c0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0xffeffffb}, 0x7fff}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x8000, 0x40, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x4000, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) write$sndseq(r6, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) write$sndseq(r5, &(0x7f0000000800)=[{0x5, 0x80, 0x6c, 0x81, @time={0x8000, 0xfffffff1}, {0x8, 0x1b}, {0xff, 0x9}, @ext={0xfc, &(0x7f0000000640)="d876e28fa6e9d4bf3a1d1f267bb4e9b83d43e61333a2781f1a5127c174f08f4ff159d51bee2e25ec216c19b324248e504cf062e0fe3b8093e65e330fcc1553ba43e3287c2056a0b4d0686ffb92885582522fe17037aebb381d50d7f86a728f8ed202cf6e27bfc8dffb1e93c956c7630e6536382608314aa866393fb926a9a4839cc96d1ccc094a4fe6c03e85e7cceee15e66ec55e4f7c92039954336f2f3a4ee15bec11bce0419d8021f1a38575f0226687d43665b1356b171c3ecd5e8fdc41cfb41bfedd3c1bd0844985fa3be85788e753a86b7da1d6250f3b2d59b536204f03bb8bf6f9bcde70ba35253183325179e88ef336d5e8e867c333ec97a"}}, {0x2, 0x5, 0xf2, 0x5, @time={0x400, 0x7fffffff}, {0x8, 0x6}, {0x80, 0x4}, @connect={{0x3, 0xe}, {0x2, 0x6}}}, {0x21, 0x4, 0x40, 0x9, @time={0x1, 0x2}, {0x9, 0x3}, {0x4, 0x5}, @quote={{0x5, 0x9}, 0x0, &(0x7f0000000740)={0x3, 0x47, 0x1, 0xff, @tick=0x200, {0x7a, 0xc}, {0x6, 0x83}, @connect={{0x4, 0x7}, {0x9e, 0x9}}}}}, {0x9, 0x2, 0xa, 0x4, @tick=0x9, {0x4, 0x9}, {0x9, 0x56}, @raw8={"3cde071c97ec76ee0740ff1f"}}, {0x9, 0x6, 0x5, 0x4c, @tick=0x31, {0x0, 0x3}, {0x7, 0x3}, @ext={0x63, &(0x7f0000000780)="c32463c13efa3c26094e727c7d490aa949d2205501288b1e6acbf1b1c6f7325297b8f84502dcdf1469077d780b5766108827f68a90157c86f9bccaf1ba0fada73ff25ee797b8011992cd473755c8c089a5599d5c539471dee0b02d9b3202ec18bb7b91"}}, {0x9, 0x2, 0x0, 0xa, @tick=0x20400000, {0xb, 0xc}, {0x2, 0xfc}, @control={0x5, 0xd3, 0x80000000}}, {0x6, 0x81, 0xff, 0x2c, @tick=0x9, {0x6, 0x2}, {0x2, 0x6}, @connect={{0x80, 0xa}, {0xa9, 0x7}}}, {0x7, 0x7, 0x6, 0x1, @tick=0x7, {0xfe, 0x6}, {0x2, 0x10}, @control={0x1, 0xe, 0x1000}}, {0x0, 0x1, 0x66, 0x8, @time={0x4, 0x9}, {0x2, 0xf6}, {0xf, 0xff}, @raw32={[0x5, 0x1, 0x6]}}], 0xfc) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 2.851200503s ago: executing program 0 (id=583): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0x1001100, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x102, 0x155) sendfile(r5, r5, 0x0, 0x6) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x9805, 0x3, 0x7fc, 0x6, 0x0, 0x1, 0x6}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9) write$UHID_CREATE(r5, &(0x7f0000000640)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/245, 0xf5, 0x254, 0x1fb2a8b0, 0x3, 0x9603, 0x3}}, 0x120) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000080}, 0x4090) 2.613346503s ago: executing program 0 (id=589): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x10040) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2a62b372, @mcast2, 0x1009}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000400)='./file2\x00', &(0x7f0000000340), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x68, 0x0, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r7, 0x0, 0x48804) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0xe, 0x10, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.564057741s ago: executing program 2 (id=590): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') syz_io_uring_setup(0x88b, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x106) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_config_ext={0x0, 0xffffffffffffb2e9}, 0x119b10, 0x8, 0xe, 0x9, 0x8, 0x6, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x5, 0x4dd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000002380)) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) syz_read_part_table(0x104b, &(0x7f0000001080)="$eJzsz7ENwjAUBNBLSEAwCzUzsEDmiViHwShp6fjIUeiogeK9wtJZd5YcfuqYbbLL/p3n5DDksqZHVVXfjx+G3a2d5yFJLZI+yZhs2oOLdlH305RubbVdqvKseSlM12/8EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+3SsAAP//iicZfA==") r4 = dup(r1) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLKb9teX5FfrS2vVaBGCYtKkVXvwolQQqSjooR5jsi2h20aaKLYWm4p4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafITGaSTbp5odlk0+7nAzP7PDPP7Dzfnbdnn2c3gI7Vn82SiJ0R8UdE9M5lFxfon3u5ef3i2K3rF8eSmJ198+8kL3fj+sWxsmi53Y4iM5BGpJ8kxU4Wmzp/4fRovV47V+SHps+8OzR1/sIz758ZPVU7VTs7cvTokcPDzz838mxL4sziurH/o8kD+155+8prYyeuvPPLd1l9dxbrG+Nolf4s8H9mc0vXPdnqnbXZrnzek8+T7jZXhjXriojscFXy6783umLh4PXGyx+3tXLAhsqeTT3Lr56ZBe5hSay1ZKXhngHc/coHffb9t5w2odmxZVx7ce4LUBb3zWKaW9MdaVGmMv/9tvX6I+LEzL9fZVNsUD8EAECjz8a+PF6Nnvjw1revZm2P3vk1aTyQv/6Zz3cXYyh9EfH/iNgTEfdFxN6IuD8iL/tgRDy0zvrc3v5Jr67zLVeUtf9eKMa2Frf/ytZf9HUVuV15/JXk5ES9dqj4TAai0pPlh1fYxw/Hfv98uXWN7b9syvZftgWLelztXtJBNz46PRqV9US94NrliP3dzeJP5kcCkojYFxH757da0wDP7jIx8dQ3B5YrtHr8K2jBONPs11l4M1n8M7Ek/lLSOD45cdv45NC2qNcODZVnxe1+/e3TN5bb/7rib4FrtbnXhuO/tEhf0jheO9Xa/d/h+Z9Wk7fyceZqMeb4wej09LnhiGpyPM9Xi7L58pGFbct8WT47/wcONr/+9xTbZPE/HBHZSfxIRDwaEY8VdX88Ip6IiIMrxPjzS6vHH2mbjv/liPGm97/583/J8T9/4XR5a1xYsmKi6/RP3y+3/7Ud/yN5aqBYkt//VtGsOt1NqnynnxsAAADcTdL8N/BJOjifTtPBwbnf8O+N/6X1yanpp09Ovnd2fO638n1RScuert6iP7Q+Ua8NJzPFO1aSY1GvjRR9xWV/6eGi3/iLru15fnBssj7e5tih0+1Y5vrP/NXV7toBG2x706Uj1U2vCNAGS8fR08XZS6+HmwHcq/xfGzrXKtd/uln1ADaf5z90rmbX/6UleWMBcG/y/IfO5fqHDpX+2O4aAG3k+Q8dadU/77cnsa1xSXXlwtUtUueWJbbqQckTEWUi3RL1kdigRLvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//uIXZzg==") sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x2c, 0xe, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0xc0) lseek(r0, 0x2000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x5c, 0x11, 0x0, 0x1, @tunnel={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) 1.454337006s ago: executing program 4 (id=592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x62000000) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)={'raw\x00', 0x0, [0x401, 0x9, 0xfffffff9, 0x20b, 0x6]}, &(0x7f0000000040)=0x54) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x13000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) sync() r4 = socket(0xa, 0x5, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x176) listen(r2, 0x10001) r5 = dup(r4) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000280)=@in6={0xa, 0x4e22, 0xa, @private0, 0xc398}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, 0x0, 0x0, 0x2000}, 0x40802) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x5, 0x3, 0x7, 0x1}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r6, 0x28, 0x8, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) 1.407721635s ago: executing program 0 (id=593): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x24a4, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44090}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.275911806s ago: executing program 0 (id=595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000ac0), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c00)={@cgroup, 0x16, 0x1, 0x8, &(0x7f0000000b00)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023892) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c40)={@map, 0xffffffffffffffff, 0x30, 0x2004, r2, @value=r5, @void, @void, @void, r3}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x15, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0x9}, @ldst={0x1, 0x1, 0x0, 0x9, 0x7, 0xc, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x42}}}, 0x0, 0xb, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xac, 0x9, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x13}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xffffffffffffffff}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf3cf}]}, 0xac}, 0x1, 0x0, 0x0, 0x11}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000210425bd70000000000000000000", @ANYRES32, @ANYBLOB="0000000000020100300012800800010067726500240002"], 0x50}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000311bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d00900000600110007000000080001007063690011003f00303030303a30303a31302e3000000000080003f4ffffff0008000b000104000006"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104f9ffffff6100000000000000", @ANYRES32=0x0, @ANYBLOB="03150000000000002c00128009000100626f6e64000000001c00028005000100040000000500160000000000050015"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.208890878s ago: executing program 1 (id=596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x1100, 0x0, 0x4000850}, 0x40) 848.400078ms ago: executing program 1 (id=597): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) r2 = socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002500), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000140)={0x80, r4, 0x1, 0x70bd26, 0x25dfdbfb}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x800) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r5, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1200000, &(0x7f00000004c0)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@ignoreqv}, {@cache_readahead}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@dfltgid={'dfltgid', 0x3d, r5}}, {@fscache}, {@loose}], [{@uid_gt={'uid>', r6}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfstransmute}, {@uid_gt}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x39, 0x37, 0x0, 0x0, 0x63, 0x33, 0x62], 0x2d, [0x36, 0x66, 0x38, 0x66], 0x2d, [0x66, 0x39, 0x65, 0x64], 0x2d, [0x34, 0x65, 0x65, 0x62], 0x2d, [0x32, 0x65, 0x31, 0x65, 0x37, 0x63, 0x37, 0x62]}}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsdef={'smackfsdef', 0x3d, 'syzkaller\x00'}}]}}) 676.311787ms ago: executing program 1 (id=598): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xd9, 0x1, 0x100, 0x1, 0x200, 0x4, 0x2}}, {0x8, 0x2, [0x3ff, 0x23c]}}]}]}, 0x4c}}, 0x0) socket$inet(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xd9, 0x1, 0x100, 0x1, 0x200, 0x4, 0x2}}, {0x8, 0x2, [0x3ff, 0x23c]}}]}]}, 0x4c}}, 0x0) (async) 673.489777ms ago: executing program 3 (id=600): timer_create(0x3, 0x0, &(0x7f0000044000)) prlimit64(0x0, 0xf, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtclass={0x4c4, 0x28, 0x400, 0x70bd21, 0xfff, {0x0, 0x0, 0x0, r1, {0x4}, {0x4, 0xffff}, {0x6, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x21, 0xa}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0xa}}, @TCA_RATE={0x6, 0x5, {0x0, 0xfd}}, @tclass_kind_options=@c_htb={{0x8}, {0x454, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x5}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x80, 0x0, 0xbd8, 0x5, 0x1, 0x3}, {0x8, 0x4, 0x7, 0x6e, 0x9, 0x8}, 0x1, 0x9, 0xab5, 0x101}}, @TCA_HTB_RTAB={0x404, 0x4, [0xfff, 0x6, 0x6, 0x4, 0x8, 0x7fff, 0xfffffffe, 0x932, 0x2, 0xc0, 0x110, 0x2, 0x7f, 0xfffffffd, 0x8, 0x782fb32e, 0x9, 0x6, 0x81, 0x7, 0x46, 0x8, 0x401, 0x0, 0x7, 0x42, 0x6, 0x8, 0x4, 0x8, 0x1, 0x9, 0x5, 0xffffffff, 0x5, 0x5, 0x1, 0x3000, 0x8, 0x2, 0x3, 0xfffff000, 0x7, 0x3, 0x9, 0x80000001, 0xd117, 0x0, 0xfffffffd, 0x6, 0x8, 0x6, 0x3ff, 0x0, 0x6, 0x1ff, 0x5108000, 0xd0cf, 0x9, 0x3, 0x9, 0x5, 0x8000, 0x2, 0x2, 0x4, 0x80000000, 0x0, 0x8, 0x7, 0x4, 0x81, 0x0, 0x2, 0xffff, 0x5, 0x8, 0x40e2, 0x2, 0x8, 0xfff, 0x3, 0x1, 0x7fffffff, 0x7, 0x0, 0x22, 0x0, 0x7fff, 0xfffff6a2, 0x1161, 0xa86c, 0x8, 0x3, 0x5, 0x2, 0x3ff, 0x0, 0x1, 0x3, 0x100, 0x2, 0x3, 0x328, 0x0, 0x4, 0x3, 0x4, 0x4, 0x2, 0x0, 0x0, 0x8, 0xe4bf, 0xfff, 0x97d, 0x2, 0x9ef, 0x7, 0xffff40cd, 0x9, 0x0, 0xfffffe01, 0xffff, 0x10001, 0x8, 0x1, 0x3, 0x7, 0x3, 0x2bf1, 0xa, 0x6, 0x4, 0x4, 0x8000, 0x3701, 0x3, 0x7, 0x7ff, 0xf82, 0x10001, 0x10000, 0x6, 0x3, 0xe5, 0x9, 0x7, 0x1, 0xd7d3, 0x8, 0xb6, 0x8, 0x5, 0x2, 0x7, 0x6, 0xd, 0x2, 0x4, 0xdf16, 0x3, 0x5a, 0xffffffff, 0xe7a5, 0xfffffff9, 0x9, 0x7, 0x2355, 0x48, 0x3, 0x0, 0x0, 0x2, 0x9, 0x87, 0x8, 0x0, 0xfffffe01, 0x800, 0xabec, 0x4, 0x3, 0x5, 0x204, 0x19, 0xd, 0x37ad0bf8, 0x1, 0x5, 0x9, 0x9b8d, 0x2, 0x5, 0x10001, 0x9, 0x7, 0x6, 0x4, 0x1, 0x5, 0x2, 0x2, 0x0, 0x1, 0xffffffff, 0x7, 0x2, 0x2, 0x2, 0x6, 0x1000, 0x6, 0x1, 0x2, 0xd, 0xfffffff1, 0x8, 0x8, 0x1000, 0xfffffff9, 0x0, 0x5, 0x0, 0x6, 0x1, 0xc, 0x8, 0x0, 0xc9, 0x1ff, 0x8, 0x4, 0x4, 0x2, 0x6, 0x9, 0x4, 0xfffffffa, 0x5, 0x3, 0x0, 0xe, 0x8c2a, 0x9, 0x8000, 0x3, 0x3, 0x7, 0xfffffffe, 0x7, 0x4, 0x0, 0x8, 0x4, 0x9]}, @TCA_HTB_RATE64={0xc, 0x6, 0x401}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_tbf={0x8}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x44404}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008d7460001"], 0x48) sendto$packet(0xffffffffffffffff, &(0x7f00000005c0)="bad330fbc9b554000400", 0xa, 0x40, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) socket$nl_route(0x10, 0x3, 0x0) shutdown(r3, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x5452, &(0x7f0000000000)) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4048840) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000009905000001000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x20000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r5, 0x0, 0x1ba8847c99}, 0x38) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) symlinkat(&(0x7f0000000480)='./file0\x00', r8, &(0x7f0000000500)='./file0\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x321, 0x70bd27, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4040000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @private}, &(0x7f0000000200)=0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f00)={{r2}, &(0x7f0000000e80), &(0x7f0000000ec0)='%pi6 \x00'}, 0x20) 471.232001ms ago: executing program 4 (id=601): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x2000c010) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300), 0x12) write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7) 463.468782ms ago: executing program 1 (id=602): syz_emit_ethernet(0x1f2, &(0x7f0000000340)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x1b8, 0x3a, 0x0, @empty, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x27a2, {0x5, 0x6, "54c03a", 0x402, 0x88, 0x1, @empty, @rand_addr=' \x01\x00', [@dstopts={0x2f}, @hopopts={0xc, 0x2f, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0x12c, "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"}, @calipso={0x7, 0x30, {0x2, 0xa, 0xff, 0x7fff, [0x3, 0x0, 0x91bc, 0xffffffffffffffdf, 0x36cf8b49]}}, @hao={0xc9, 0x10, @private0}]}]}}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000008000000911193000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) statx(0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r4) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x4) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300002a00028008000500", @ANYRES32=r9], 0x44}}, 0x8000) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff0001000000000000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={&(0x7f00000001c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@bridge_delneigh={0x58, 0x1d, 0x1, 0x70bd2d, 0x25dfdbff, {0x2, 0x0, 0x0, r6, 0x80, 0xcd}, [@NDA_VLAN={0x6, 0x5, 0x1}, @NDA_VNI={0x8, 0x7, 0x100}, @NDA_PROTOCOL={0x5, 0xc, 0x81}, @NDA_CACHEINFO={0x14, 0x3, {0x39a, 0x7fffffff, 0x1, 0x8001}}, @NDA_PROBES={0x8, 0x4, 0x9}, @NDA_VNI={0x8, 0x7, 0x7fffffff}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0xa4, 0x12, 0x4, 0x70bd2a, 0x25dfdbfd, {0x2, 0x9, 0xb4, 0x60, {0x4e24, 0x4e23, [0x4, 0x10000, 0x1, 0x3], [0x2, 0xe, 0x1, 0x101], r6, [0xd23, 0xee]}, 0x40, 0xc}, [@INET_DIAG_REQ_BYTECODE={0x55, 0x1, "ad5111cef049d5e24dd38b1c7fe443fa6c524a8497c24cfe128104d04f043cab6a312015b3c081e7198ea75996fd1c40f0b563ace7a8d0ed1a1c96ea0847d8328e88efc965561ee94cea01d515435a805b"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in=@rand_addr=0x64010100, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x3c, r12, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) 431.617568ms ago: executing program 0 (id=603): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) tkill(r1, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x100a0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2ef}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x8}, 0x100882, 0x7ff, 0x6, 0x6, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000580), &(0x7f00000005c0)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000040), &(0x7f0000000080)=r6}, 0x20) syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4fe, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x42}}, {0x800, 0x0, 0x84, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b5710c00", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="31a0bcb8fd2c0c666c657200"], 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) socket$inet6(0x10, 0x3, 0x0) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) 378.438536ms ago: executing program 3 (id=604): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$gtp(0x0, r0) (async) syz_genetlink_get_family_id$gtp(0x0, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x12022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x12022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) (async) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) syz_emit_ethernet(0xfd02, &(0x7f0000000000)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f8b"}, 0xe) ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f0000000200)=0x5) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x1, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x1, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 378.054996ms ago: executing program 4 (id=605): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x24a4, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44090}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 300.361179ms ago: executing program 1 (id=606): socket$can_raw(0x1d, 0x3, 0x1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609093a140006"], 0x78}, 0x1, 0xffffffff00000003}, 0x2000800) sched_setscheduler(0x0, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, &(0x7f0000000380)={0x228, 0x8000000000000001, 0x0, 0x7}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r0, 0x0, 0x0, 0x8800000) io_setup(0x1, &(0x7f0000000b80)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 257.920277ms ago: executing program 4 (id=607): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x9a) ftruncate(r0, 0x6000000) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0xa2000e79) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000240)=""/152, 0x98}, {&(0x7f0000000300)=""/114, 0x72}], 0x2, 0x4, 0xffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x48) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_getnetconf={0x2c, 0x52, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x8}, @NETCONFA_FORWARDING={0x8}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x6c}]}, 0x2c}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0x100, 0x9, 0x0) 217.270913ms ago: executing program 3 (id=608): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @local, 0x9}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x4001000) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xf00}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 132.277008ms ago: executing program 3 (id=609): r0 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xbc01a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x8000000004) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @random="0000ea0700", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x4000}}}}}}, 0x0) 132.073148ms ago: executing program 4 (id=610): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x12, 0x60a, 0x2b8, 0x202, 0x390, 0x2e8, 0x2e8, 0x390, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x2b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0xfffc, 0x0, 'bm\x00', "6b3100000000000617ae5119b5135c2aee68cc3a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dfed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}, 0x48}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x2, 'system_u:object_r:getty_log_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4}, {0x4, 0x1, 0x2}, 0x3, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) 123.718879ms ago: executing program 3 (id=611): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000084) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x100) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0xfffffffffffffffc, 0x260c02) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000000)={0x9001, 0x6, 0xe1bd}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0xa, 0x1, 0x4ecc, &(0x7f0000000100)) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x701, 0x10000, 0xffdffffc, {0x26}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044015}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) pwritev(r0, 0x0, 0x0, 0x0, 0x1ff) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008040) 96.445184ms ago: executing program 4 (id=612): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newlink={0xd8, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1591, 0x4000}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_PORT_SELF={0xa4, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xa0, 0x2, 'ten\xb60\x00_\xcd\xe8\x18t\x15a\xee\xa0\xf5\x04\xf3\x05\x92\xc7\xd9h\xcb\xe6\xdf\x92\x83\xa5\xf4\xfe[;\xe2>\xcd6\xbc\xc0\x83\x88\xa4U\xe1>3\\,0\xf2\xc8\x86\xa0\x1d\x8f\xfd$\x01\vvF\x04\x10\xc1\xaef\xe4/\x98\xac\xa4\x99\x03\xec\v\x9e\xde\x0f`-\xd5\xad\xe8\x92\x91\fv\x9a\xe3\xed8\xaf\xb5\xdfC\x9f\xd7z\xa9\x15\xb6q/\x15\xfb\xf3\xb6\xf2_\x87\x01\xe3F\x01\r*\x1aUz\xbc.~0\"/#Y5J\x9e0k70E\xddb\xc3\x9b\x12\x17\xa4\x17\xadH\x10\"\xa2\xbeJ9?F\tW}'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24044884}, 0x20000010) io_setup(0x1, &(0x7f0000000b80)=0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) connect$can_bcm(r3, &(0x7f0000001ff0)={0x1d, r4}, 0x10) sendmsg$can_raw(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000280)=@canfd={{0x1}, 0xf5, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000104e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ppoll(&(0x7f0000000080)=[{r0, 0x802b}], 0x1, 0x0, 0x0, 0x0) rt_sigprocmask(0x1, &(0x7f0000000100)={[0x1f1]}, 0x0, 0xffffffffffffff51) timer_create(0x2, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r5, 0xe54aef35e9c2845d, &(0x7f0000000280)={{}, {0x0, 0x9}}, 0x0) 52.731251ms ago: executing program 2 (id=613): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0xf5fb}], 0x1, 0x4, 0x0) r4 = syz_pidfd_open(r2, 0x0) recvmmsg(r1, &(0x7f00000015c0)=[{{&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/230, 0xe6}, 0x1}, {{0x0, 0xfffffcfe, 0x0}}], 0x2, 0x40, 0x0) setns(r4, 0x24020000) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0xfffe, 0x2000}, 0x4) umount2(&(0x7f0000000040)='.\x00', 0x2) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r6, 0x0, 0x1e) pipe(&(0x7f0000000380)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x200000000000000) writev(r0, &(0x7f0000000740), 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x74, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaad030b2327e8281003e000004aaaaeda1941924380cac70d949a6472e68c396ee3ee3cda16782d881d0cdca8e42bd5bbb9192d23801f64bebd4c803e45faf67f4a8c46a9e5b077b8f53a7d5340d8faa81f5c14ccdbebd33d5dea5a2702f946369a300"/116], &(0x7f0000000340)={0x6, 0x3, [0xb18, 0xc6e, 0xaa5, 0xf6d]}) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) shutdown(r8, 0x0) 0s ago: executing program 3 (id=614): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) tkill(r0, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x100a0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2ef}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x8}, 0x100882, 0x7ff, 0x6, 0x6, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000580), &(0x7f00000005c0)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="31a0bcb8fd2c0c666c657200"], 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) socket$inet6(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x40000000000017d, 0x888) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) kernel console output (not intermixed with test programs): etopt } for pid=3650 comm="syz.1.43" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.110564][ T3653] loop3: detected capacity change from 0 to 512 [ 49.142049][ T28] audit: type=1400 audit(1776183734.500:170): avc: denied { create } for pid=3650 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.171935][ T3648] loop0: detected capacity change from 0 to 8192 [ 49.193969][ T3653] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 49.200463][ T28] audit: type=1400 audit(1776183734.500:171): avc: denied { listen } for pid=3650 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.222275][ T3653] EXT4-fs (loop3): mount failed [ 49.260158][ T3659] siw: device registration error -23 [ 49.556057][ T3641] EXT4-fs (loop2): shut down requested (1) [ 49.584115][ T28] audit: type=1400 audit(1776183734.990:172): avc: denied { write } for pid=3658 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 49.837694][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.854874][ T28] audit: type=1400 audit(1776183735.260:173): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 49.996893][ T28] audit: type=1400 audit(1776183735.260:174): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.050523][ T28] audit: type=1400 audit(1776183735.260:175): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.072255][ T28] audit: type=1400 audit(1776183735.260:176): avc: denied { add_name } for pid=2983 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.129315][ T3670] x_tables: duplicate underflow at hook 2 [ 50.565151][ T3675] tmpfs: Bad value for 'mpol' [ 50.644508][ T3678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=3678 comm=syz.3.49 [ 50.664841][ T3678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=3678 comm=syz.3.49 [ 50.713461][ T3678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=3678 comm=syz.3.49 [ 50.750049][ T3678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=3678 comm=syz.3.49 [ 50.824810][ T3678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=3678 comm=syz.3.49 [ 50.950182][ T3690] loop0: detected capacity change from 0 to 512 [ 50.963780][ T3684] 9p: Bad value for 'rfdno' [ 51.007062][ T3690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 51.095307][ T3659] loop1: detected capacity change from 0 to 8192 [ 51.112067][ T3690] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.53: Unimplemented hash flags: 0x0001 [ 51.147778][ T3690] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.53: Corrupt directory, running e2fsck is recommended [ 51.203088][ T3690] netlink: 'syz.0.53': attribute type 4 has an invalid length. [ 51.218266][ T3690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.53'. [ 51.403895][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.429103][ T3704] netlink: 32 bytes leftover after parsing attributes in process `syz.0.57'. [ 51.995009][ T3704] loop0: detected capacity change from 0 to 512 [ 52.010903][ T3704] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 52.098132][ T3705] syz.3.56 (3705) used greatest stack depth: 9824 bytes left [ 52.126298][ T3704] 9p: Could not find request transport: Hd [ 52.137096][ T3717] tmpfs: Bad value for 'mpol' [ 52.226808][ T3723] Zero length message leads to an empty skb [ 52.369259][ T3732] loop2: detected capacity change from 0 to 512 [ 52.445796][ T3732] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.460383][ T3732] ------------[ cut here ]------------ [ 52.466274][ T3732] EA inode 11 i_nlink=2 [ 52.466543][ T3732] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.2.64/3732 [ 52.482194][ T3732] Modules linked in: [ 52.486983][ T3732] CPU: 1 UID: 0 PID: 3732 Comm: syz.2.64 Not tainted syzkaller #0 PREEMPT(full) [ 52.496644][ T3732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 52.507035][ T3732] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 52.514106][ T3732] Code: 64 09 99 ff 4c 8d 2d 1d 6e 7d 05 49 8d 7e 40 e8 d4 a2 b5 ff 49 8b 6e 40 4c 89 e7 e8 08 9e b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 bf fa dd 03 66 66 66 66 66 66 2e [ 52.535775][ T3732] RSP: 0018:ffffc9000182b778 EFLAGS: 00010246 [ 52.542413][ T3732] RAX: ffff888104ca3d08 RBX: ffff88810061e950 RCX: ffffffff81c05578 [ 52.551063][ T3732] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff873dc380 [ 52.559364][ T3732] RBP: 000000000000000b R08: 000188810061e903 R09: 0000000000000000 [ 52.568023][ T3732] R10: 0001c900011abe17 R11: 0000000000000008 R12: ffff88810061e900 [ 52.576735][ T3732] R13: ffffffff873dc380 R14: ffff88810061e8b8 R15: 0000000000000001 [ 52.585255][ T3732] FS: 00007fe267a856c0(0000) GS:ffff8882ae7d4000(0000) knlGS:0000000000000000 [ 52.594454][ T3732] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.601935][ T3732] CR2: 0000000034747865 CR3: 000000011c1aa000 CR4: 00000000003506f0 [ 52.611162][ T3732] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.619774][ T3732] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 52.628122][ T3732] Call Trace: [ 52.632016][ T3732] [ 52.635585][ T3732] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 52.642025][ T3732] ? errseq_check+0x2c/0x50 [ 52.647110][ T3732] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 52.653036][ T3732] ? ext4_truncate+0x92b/0xb00 [ 52.658663][ T3732] ext4_evict_inode+0xb16/0xe90 [ 52.663963][ T3732] ? __pfx_ext4_evict_inode+0x10/0x10 [ 52.669984][ T3732] evict+0x2af/0x510 [ 52.674102][ T3732] ? __dquot_initialize+0x146/0x7c0 [ 52.680563][ T3732] iput+0x41a/0x580 [ 52.685015][ T3732] ext4_process_orphan+0x1a9/0x1c0 [ 52.690686][ T3732] ext4_orphan_cleanup+0x6a8/0xa00 [ 52.696333][ T3732] ext4_fill_super+0x3414/0x37c0 [ 52.701924][ T3732] ? set_blocksize+0x14c/0x270 [ 52.707372][ T3732] ? setup_bdev_super+0x30e/0x370 [ 52.712682][ T3732] ? __pfx_ext4_fill_super+0x10/0x10 [ 52.718332][ T3732] get_tree_bdev_flags+0x291/0x300 [ 52.723921][ T3732] ? __pfx_ext4_fill_super+0x10/0x10 [ 52.729695][ T3732] get_tree_bdev+0x1f/0x30 [ 52.734485][ T3732] ext4_get_tree+0x1c/0x30 [ 52.739272][ T3732] vfs_get_tree+0x57/0x1d0 [ 52.744191][ T3732] do_new_mount+0x288/0x8d0 [ 52.749238][ T3732] path_mount+0x4d0/0xbc0 [ 52.754226][ T3732] __se_sys_mount+0x28c/0x2e0 [ 52.759444][ T3732] __x64_sys_mount+0x67/0x80 [ 52.764754][ T3732] x64_sys_call+0x2d61/0x3020 [ 52.769774][ T3732] do_syscall_64+0x12c/0x3b0 [ 52.774724][ T3732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.781366][ T3732] RIP: 0033:0x7fe26906da8a [ 52.786364][ T3732] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.806523][ T3732] RSP: 002b:00007fe267a84e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 52.815453][ T3732] RAX: ffffffffffffffda RBX: 00007fe267a84ee0 RCX: 00007fe26906da8a [ 52.823942][ T3732] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fe267a84ea0 [ 52.832362][ T3732] RBP: 00002000000009c0 R08: 00007fe267a84ee0 R09: 0000000000800718 [ 52.846983][ T3732] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 52.855544][ T3732] R13: 00007fe267a84ea0 R14: 000000000000048d R15: 0000200000000200 [ 52.863855][ T3732] [ 52.867434][ T3732] ---[ end trace 0000000000000000 ]--- [ 52.876424][ T3732] EXT4-fs (loop2): 1 orphan inode deleted [ 52.891543][ T3732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.086415][ T3732] syz.2.64 (3732) used greatest stack depth: 9464 bytes left [ 53.174192][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.247333][ T3746] tmpfs: Bad value for 'mpol' [ 53.260386][ T3742] mmap: syz.1.67 (3742) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.485102][ T3758] tmpfs: Bad value for 'mpol' [ 53.961841][ T3766] netlink: 32 bytes leftover after parsing attributes in process `syz.1.73'. [ 53.973403][ T3766] loop1: detected capacity change from 0 to 512 [ 53.982184][ T3766] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 54.017849][ T3766] 9p: Could not find request transport: Hd [ 54.074804][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 54.074816][ T28] audit: type=1400 audit(1776183739.490:198): avc: denied { read write } for pid=3770 comm="syz.3.75" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 54.106065][ T3771] netlink: 'syz.3.75': attribute type 3 has an invalid length. [ 54.132201][ T28] audit: type=1400 audit(1776183739.530:199): avc: denied { open } for pid=3770 comm="syz.3.75" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 54.189245][ T3781] loop1: detected capacity change from 0 to 256 [ 54.249961][ T28] audit: type=1400 audit(1776183739.670:200): avc: denied { lock } for pid=3778 comm="syz.1.78" path="socket:[6238]" dev="sockfs" ino=6238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 54.293089][ T3787] FAULT_INJECTION: forcing a failure. [ 54.293089][ T3787] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.314829][ T3787] CPU: 0 UID: 0 PID: 3787 Comm: syz.3.80 Tainted: G W syzkaller #0 PREEMPT(full) [ 54.314892][ T3787] Tainted: [W]=WARN [ 54.314900][ T3787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 54.314950][ T3787] Call Trace: [ 54.314957][ T3787] [ 54.314965][ T3787] __dump_stack+0x1d/0x30 [ 54.314996][ T3787] dump_stack_lvl+0x95/0xd0 [ 54.315023][ T3787] dump_stack+0x15/0x1b [ 54.315049][ T3787] should_fail_ex+0x263/0x280 [ 54.315130][ T3787] should_fail+0xb/0x20 [ 54.315245][ T3787] should_fail_usercopy+0x1a/0x20 [ 54.315268][ T3787] _copy_from_user+0x1c/0xb0 [ 54.315293][ T3787] __snd_timer_user_ioctl+0xb2/0x2bc0 [ 54.315325][ T3787] ? do_vfs_ioctl+0x84f/0xe70 [ 54.315435][ T3787] ? selinux_file_ioctl+0x338/0x3b0 [ 54.315558][ T3787] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 54.315584][ T3787] snd_timer_user_ioctl+0x45/0x90 [ 54.315606][ T3787] __se_sys_ioctl+0xce/0x140 [ 54.315625][ T3787] __x64_sys_ioctl+0x43/0x50 [ 54.315669][ T3787] x64_sys_call+0x1563/0x3020 [ 54.315701][ T3787] do_syscall_64+0x12c/0x3b0 [ 54.315769][ T3787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.315790][ T3787] RIP: 0033:0x7fda0d46c819 [ 54.315804][ T3787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.315824][ T3787] RSP: 002b:00007fda0bec7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.315844][ T3787] RAX: ffffffffffffffda RBX: 00007fda0d6e5fa0 RCX: 00007fda0d46c819 [ 54.315925][ T3787] RDX: 0000200000000100 RSI: 00000000c0145401 RDI: 0000000000000003 [ 54.315984][ T3787] RBP: 00007fda0bec7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.316000][ T3787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.316012][ T3787] R13: 00007fda0d6e6038 R14: 00007fda0d6e5fa0 R15: 00007ffd515b90b8 [ 54.316035][ T3787] [ 54.566278][ T3793] tmpfs: Bad value for 'mpol' [ 54.588141][ T3794] loop3: detected capacity change from 0 to 512 [ 54.668088][ T3794] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 54.668112][ T3794] EXT4-fs (loop3): mount failed [ 54.842408][ T28] audit: type=1400 audit(1776183740.260:201): avc: denied { create } for pid=3800 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 54.874447][ T3810] tmpfs: Bad value for 'mpol' [ 54.922080][ T28] audit: type=1400 audit(1776183740.290:202): avc: denied { create } for pid=3800 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.942005][ T28] audit: type=1400 audit(1776183740.290:203): avc: denied { read } for pid=3800 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.963121][ T28] audit: type=1400 audit(1776183740.340:204): avc: denied { connect } for pid=3800 comm="syz.2.86" laddr=224.0.0.1 lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.989385][ T3815] loop4: detected capacity change from 0 to 256 [ 55.002303][ T3815] FAT-fs (loop4): Directory bread(block 64) failed [ 55.009113][ T3815] FAT-fs (loop4): Directory bread(block 65) failed [ 55.015896][ T3815] FAT-fs (loop4): Directory bread(block 66) failed [ 55.022896][ T3815] FAT-fs (loop4): Directory bread(block 67) failed [ 55.029734][ T3815] FAT-fs (loop4): Directory bread(block 68) failed [ 55.036465][ T3815] FAT-fs (loop4): Directory bread(block 69) failed [ 55.043062][ T3815] FAT-fs (loop4): Directory bread(block 70) failed [ 55.049808][ T3815] FAT-fs (loop4): Directory bread(block 71) failed [ 55.124890][ T3815] FAT-fs (loop4): Directory bread(block 72) failed [ 55.144990][ T3815] FAT-fs (loop4): Directory bread(block 73) failed [ 55.167606][ T3800] syz.2.86 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 55.178786][ T3800] CPU: 1 UID: 0 PID: 3800 Comm: syz.2.86 Tainted: G W syzkaller #0 PREEMPT(full) [ 55.178836][ T3800] Tainted: [W]=WARN [ 55.178848][ T3800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 55.178871][ T3800] Call Trace: [ 55.178878][ T3800] [ 55.178886][ T3800] __dump_stack+0x1d/0x30 [ 55.178914][ T3800] dump_stack_lvl+0x95/0xd0 [ 55.178981][ T3800] dump_stack+0x15/0x1b [ 55.178999][ T3800] dump_header+0x80/0x240 [ 55.179023][ T3800] oom_kill_process+0x295/0x350 [ 55.179131][ T3800] out_of_memory+0x97d/0xb80 [ 55.179159][ T3800] try_charge_memcg+0x62e/0xa10 [ 55.179202][ T3800] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 55.179281][ T3800] __swap_cache_prepare_and_add+0x67/0x460 [ 55.179326][ T3800] ? alloc_pages_mpol+0x217/0x260 [ 55.179365][ T3800] swap_cache_alloc_folio+0xa2/0x120 [ 55.179468][ T3800] swap_cluster_readahead+0x26e/0x3d0 [ 55.179511][ T3800] swapin_readahead+0xde/0x840 [ 55.179608][ T3800] ? _raw_spin_unlock+0x9/0x30 [ 55.179636][ T3800] ? swap_put_entries_cluster+0x385/0x3a0 [ 55.179672][ T3800] ? swap_put_entries_cluster+0x111/0x3a0 [ 55.179752][ T3800] ? __rcu_read_unlock+0x4e/0x70 [ 55.179777][ T3800] ? swap_cache_get_folio+0x26f/0x280 [ 55.179809][ T3800] do_swap_page+0x2fe/0x21e0 [ 55.179881][ T3800] ? css_rstat_updated+0xbb/0x280 [ 55.179904][ T3800] ? __rcu_read_lock+0x36/0x50 [ 55.179922][ T3800] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 55.179953][ T3800] handle_mm_fault+0xb46/0x3020 [ 55.180016][ T3800] ? vma_start_read+0x1c7/0x2c0 [ 55.180120][ T3800] do_user_addr_fault+0x62f/0x1050 [ 55.180150][ T3800] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 55.180175][ T3800] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 55.180221][ T3800] ? trace_page_fault_user+0x1f/0xe0 [ 55.180319][ T3800] exc_page_fault+0x62/0xa0 [ 55.180389][ T3800] asm_exc_page_fault+0x26/0x30 [ 55.180407][ T3800] RIP: 0033:0x7fe269027978 [ 55.180421][ T3800] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 55.180441][ T3800] RSP: 002b:00007ffe80f0a930 EFLAGS: 00010246 [ 55.180460][ T3800] RAX: 0000000000000000 RBX: 000055555a1ba500 RCX: 00007fe26902d04e [ 55.180474][ T3800] RDX: 00007ffe80f0a980 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.180485][ T3800] RBP: 00007fe2692e7da0 R08: 0000000000000000 R09: 0000000000000000 [ 55.180556][ T3800] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000d8b2 [ 55.180570][ T3800] R13: 00007fe2692e618c R14: 000000000000d6a2 R15: 00007fe2692e6180 [ 55.180614][ T3800] [ 55.180755][ T3800] memory: usage 303300kB, limit 307200kB, failcnt 251 [ 55.757733][ T28] audit: type=1400 audit(1776183741.170:205): avc: denied { create } for pid=3823 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.778482][ T3824] netlink: 'syz.0.93': attribute type 2 has an invalid length. [ 55.793253][ T3800] memory+swap: usage 266216kB, limit 9007199254740988kB, failcnt 0 [ 55.801813][ T3800] kmem: usage 264840kB, limit 9007199254740988kB, failcnt 0 [ 55.809388][ T3800] Memory cgroup stats for /syz2: [ 55.809689][ T3800] cache 524288 [ 55.818421][ T3800] rss 4096 [ 55.821568][ T3800] shmem 0 [ 55.824520][ T3800] mapped_file 65536 [ 55.828586][ T3800] dirty 0 [ 55.831553][ T3800] writeback 0 [ 55.834539][ T3828] loop4: detected capacity change from 0 to 512 [ 55.835355][ T3800] workingset_refault_anon 92 [ 55.845945][ T3800] workingset_refault_file 991 [ 55.850726][ T3800] swap 188416 [ 55.856490][ T3800] swapcached 16982016 [ 55.860614][ T3800] pgpgin 73550 [ 55.863997][ T3800] pgpgout 73418 [ 55.867748][ T3800] pgfault 19326 [ 55.871213][ T3800] pgmajfault 40 [ 55.874682][ T3800] inactive_anon 4096 [ 55.878969][ T3800] active_anon 8192 [ 55.882735][ T3800] inactive_file 4096 [ 55.891232][ T3828] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 55.902113][ T3800] active_file 524288 [ 55.906266][ T3800] unevictable 0 [ 55.909762][ T3800] hierarchical_memory_limit 314572800 [ 55.915434][ T3800] hierarchical_memsw_limit 9223372036854771712 [ 55.921596][ T3800] total_cache 524288 [ 55.925733][ T3800] total_rss 4096 [ 55.929304][ T3800] total_shmem 0 [ 55.932773][ T3800] total_mapped_file 65536 [ 55.937452][ T3800] total_dirty 0 [ 55.940943][ T3800] total_writeback 0 [ 55.955440][ T3800] total_workingset_refault_anon 92 [ 55.955815][ T3834] tmpfs: Bad value for 'mpol' [ 55.960607][ T3800] total_workingset_refault_file 991 [ 55.960616][ T3800] total_swap 188416 [ 55.960622][ T3800] total_swapcached 16982016 [ 55.988667][ T28] audit: type=1400 audit(1776183741.390:206): avc: denied { setopt } for pid=3821 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.017944][ T3800] total_pgpgin 73550 [ 56.022597][ T3800] total_pgpgout 73418 [ 56.026644][ T3800] total_pgfault 19326 [ 56.030836][ T3800] total_pgmajfault 40 [ 56.039261][ T3800] total_inactive_anon 4096 [ 56.043700][ T3800] total_active_anon 8192 [ 56.048118][ T3800] total_inactive_file 4096 [ 56.052611][ T3800] total_active_file 524288 [ 56.057133][ T3800] total_unevictable 0 [ 56.061226][ T3800] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.86,pid=3800,uid=0 [ 56.075821][ T3800] Memory cgroup out of memory: Killed process 3800 (syz.2.86) total-vm:94296kB, anon-rss:1236kB, file-rss:22464kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 56.094421][ T3828] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.92: bg 0: block 393: padding at end of block bitmap is not set [ 56.122116][ T3828] loop4: lost filesystem error report for type 5 error -117 [ 56.122890][ T3828] EXT4-fs (loop4): Remounting filesystem read-only [ 56.130239][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 56.130253][ C1] EXT4-fs (loop4): initial error at time 1776183741: ext4_validate_block_bitmap:441 [ 56.130273][ C1] EXT4-fs (loop4): last error at time 1776183741: ext4_validate_block_bitmap:441 [ 56.163080][ T3839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.95'. [ 56.171924][ T3839] netlink: 348 bytes leftover after parsing attributes in process `syz.0.95'. [ 56.180967][ T28] audit: type=1400 audit(1776183741.590:207): avc: denied { map } for pid=3838 comm="syz.0.95" path="socket:[5582]" dev="sockfs" ino=5582 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.185610][ T3839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.95'. [ 56.209958][ T3828] EXT4-fs (loop4): 2 truncates cleaned up [ 56.219198][ T3828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.254819][ T3839] netlink: 348 bytes leftover after parsing attributes in process `syz.0.95'. [ 56.289744][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.334953][ T3849] tmpfs: Bad value for 'mpol' [ 56.603394][ T3866] tmpfs: Bad value for 'mpol' [ 56.729727][ T3872] loop3: detected capacity change from 0 to 512 [ 56.776431][ T3872] ext4: Unknown parameter 'dont_appraise' [ 57.027992][ T3851] syz.4.98 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 57.043488][ T3851] CPU: 0 UID: 0 PID: 3851 Comm: syz.4.98 Tainted: G W syzkaller #0 PREEMPT(full) [ 57.043516][ T3851] Tainted: [W]=WARN [ 57.043522][ T3851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 57.043616][ T3851] Call Trace: [ 57.043623][ T3851] [ 57.043631][ T3851] __dump_stack+0x1d/0x30 [ 57.043663][ T3851] dump_stack_lvl+0x95/0xd0 [ 57.043689][ T3851] dump_stack+0x15/0x1b [ 57.043716][ T3851] dump_header+0x80/0x240 [ 57.043822][ T3851] oom_kill_process+0x295/0x350 [ 57.043881][ T3851] out_of_memory+0x97d/0xb80 [ 57.043938][ T3851] try_charge_memcg+0x62e/0xa10 [ 57.043988][ T3851] obj_cgroup_charge_pages+0x23/0xc0 [ 57.044034][ T3851] __memcg_kmem_charge_page+0x9e/0x170 [ 57.044125][ T3851] __alloc_frozen_pages_noprof+0x18a/0x360 [ 57.044188][ T3851] alloc_pages_mpol+0xb3/0x260 [ 57.044218][ T3851] alloc_pages_noprof+0x8f/0x140 [ 57.044252][ T3851] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 57.044294][ T3851] __kvmalloc_node_noprof+0x3d4/0x650 [ 57.044374][ T3851] ? futex_hash_allocate+0x190/0x9d0 [ 57.044405][ T3851] ? futex_hash_allocate+0x190/0x9d0 [ 57.044445][ T3851] futex_hash_allocate+0x190/0x9d0 [ 57.044483][ T3851] ? cap_task_prctl+0x13f/0x6e0 [ 57.044586][ T3851] futex_hash_prctl+0xd8/0xf0 [ 57.044623][ T3851] __se_sys_prctl+0x4f4/0x1400 [ 57.044732][ T3851] __x64_sys_prctl+0x67/0x80 [ 57.044766][ T3851] x64_sys_call+0x2533/0x3020 [ 57.044801][ T3851] do_syscall_64+0x12c/0x3b0 [ 57.044958][ T3851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.044983][ T3851] RIP: 0033:0x7f4505dcc819 [ 57.045073][ T3851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.045091][ T3851] RSP: 002b:00007f4504827028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 57.045109][ T3851] RAX: ffffffffffffffda RBX: 00007f4506045fa0 RCX: 00007f4505dcc819 [ 57.045122][ T3851] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 57.045136][ T3851] RBP: 00007f4505e62c91 R08: 0000000000000000 R09: 0000000000000000 [ 57.045151][ T3851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.045226][ T3851] R13: 00007f4506046038 R14: 00007f4506045fa0 R15: 00007ffdce620668 [ 57.045246][ T3851] [ 57.277533][ T3860] loop2: detected capacity change from 0 to 512 [ 57.296317][ T3851] memory: usage 307200kB, limit 307200kB, failcnt 707 [ 57.303984][ T3851] memory+swap: usage 307316kB, limit 9007199254740988kB, failcnt 0 [ 57.312146][ T3851] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 57.334705][ T3851] Memory cgroup stats for /syz4: [ 57.335075][ T3851] cache 0 [ 57.356779][ T3851] rss 0 [ 57.359565][ T3851] shmem 0 [ 57.365660][ T3851] mapped_file 0 [ 57.369291][ T3851] dirty 0 [ 57.372257][ T3851] writeback 8192 [ 57.376196][ T3879] tmpfs: Bad value for 'mpol' [ 57.384640][ T3882] process 'syz.0.113' launched './file1' with NULL argv: empty string added [ 57.412817][ T3851] workingset_refault_anon 15 [ 57.424802][ T3851] workingset_refault_file 562 [ 57.434623][ T3851] swap 118784 [ 57.454935][ T3851] swapcached 192512 [ 57.461546][ T3851] pgpgin 9265 [ 57.465078][ T3851] pgpgout 9262 [ 57.468515][ T3851] pgfault 9948 [ 57.471932][ T3851] pgmajfault 21 [ 57.475552][ T3851] inactive_anon 8192 [ 57.479505][ T3851] active_anon 4096 [ 57.483369][ T3851] inactive_file 0 [ 57.488783][ T3851] active_file 0 [ 57.493506][ T3851] unevictable 0 [ 57.504796][ T3851] hierarchical_memory_limit 314572800 [ 57.515567][ T3860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.538045][ T3851] hierarchical_memsw_limit 9223372036854771712 [ 57.568389][ T3894] loop3: detected capacity change from 0 to 512 [ 57.594492][ T3894] EXT4-fs: Mount option(s) incompatible with ext2 [ 57.646320][ T3851] total_cache 0 [ 57.649869][ T3851] total_rss 0 [ 57.669851][ T3851] total_shmem 0 [ 57.673420][ T3851] total_mapped_file 0 [ 57.681643][ T3851] total_dirty 0 [ 57.685459][ T3851] total_writeback 8192 [ 57.689726][ T3851] total_workingset_refault_anon 15 [ 57.697348][ T3851] total_workingset_refault_file 562 [ 57.702717][ T3851] total_swap 118784 [ 57.776875][ T3851] total_swapcached 192512 [ 57.785769][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.798029][ T3851] total_pgpgin 9265 [ 57.801977][ T3851] total_pgpgout 9262 [ 57.809884][ T3851] total_pgfault 9948 [ 57.813852][ T3851] total_pgmajfault 21 [ 57.819848][ T3851] total_inactive_anon 8192 [ 57.824356][ T3851] total_active_anon 4096 [ 57.829738][ T3851] total_inactive_file 0 [ 57.833979][ T3851] total_active_file 0 [ 57.839284][ T3851] total_unevictable 0 [ 57.843379][ T3851] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.98,pid=3850,uid=0 [ 57.859849][ T3851] Memory cgroup out of memory: Killed process 3850 (syz.4.98) total-vm:90456kB, anon-rss:1232kB, file-rss:21636kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 57.880389][ T3850] syz.4.98 (3850) used greatest stack depth: 9296 bytes left [ 58.332847][ T3921] loop0: detected capacity change from 0 to 1024 [ 58.333955][ T3924] tmpfs: Bad value for 'mpol' [ 58.398834][ T3921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 58.411555][ T3921] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.502728][ T3933] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 58.515898][ T3933] bond1 (unregistering): Released all slaves [ 58.811910][ T3938] FAULT_INJECTION: forcing a failure. [ 58.811910][ T3938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.930871][ T3938] CPU: 0 UID: 0 PID: 3938 Comm: syz.1.128 Tainted: G W syzkaller #0 PREEMPT(full) [ 58.930902][ T3938] Tainted: [W]=WARN [ 58.930912][ T3938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 58.930934][ T3938] Call Trace: [ 58.930942][ T3938] [ 58.930949][ T3938] __dump_stack+0x1d/0x30 [ 58.931050][ T3938] dump_stack_lvl+0x95/0xd0 [ 58.931072][ T3938] dump_stack+0x15/0x1b [ 58.931092][ T3938] should_fail_ex+0x263/0x280 [ 58.931152][ T3938] should_fail+0xb/0x20 [ 58.931266][ T3938] should_fail_usercopy+0x1a/0x20 [ 58.931290][ T3938] _copy_from_iter+0xcf/0xea0 [ 58.931313][ T3938] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 58.931358][ T3938] ? __build_skb+0x43/0x220 [ 58.931453][ T3938] ? __build_skb+0x1b3/0x220 [ 58.931482][ T3938] ? is_vmalloc_addr+0x37/0x90 [ 58.931504][ T3938] netlink_sendmsg+0x4ae/0x6f0 [ 58.931634][ T3938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.931664][ T3938] sock_write_iter+0x2e8/0x320 [ 58.931708][ T3938] ? __pfx_sock_write_iter+0x10/0x10 [ 58.931803][ T3938] vfs_write+0x5a6/0x9f0 [ 58.931830][ T3938] ksys_write+0xdc/0x1a0 [ 58.931857][ T3938] __x64_sys_write+0x40/0x50 [ 58.931924][ T3938] x64_sys_call+0x27e1/0x3020 [ 58.932046][ T3938] do_syscall_64+0x12c/0x3b0 [ 58.932069][ T3938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.932091][ T3938] RIP: 0033:0x7f55d339c819 [ 58.932139][ T3938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.932157][ T3938] RSP: 002b:00007f55d1def028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.932178][ T3938] RAX: ffffffffffffffda RBX: 00007f55d3615fa0 RCX: 00007f55d339c819 [ 58.932263][ T3938] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000004 [ 58.932336][ T3938] RBP: 00007f55d1def090 R08: 0000000000000000 R09: 0000000000000000 [ 58.932349][ T3938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.932361][ T3938] R13: 00007f55d3616038 R14: 00007f55d3615fa0 R15: 00007ffcafd79a08 [ 58.932429][ T3938] [ 59.530385][ T3952] loop3: detected capacity change from 0 to 512 [ 59.665894][ T3952] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.698872][ T3952] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.134: iget: bad i_size value: 38620345925642 [ 60.236696][ T3952] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.237783][ T3952] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.134: couldn't read orphan inode 15 (err -117) [ 60.246975][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 60.246993][ C0] EXT4-fs (loop3): initial error at time 1776183745: ext4_orphan_get:1397: inode 15 [ 60.247025][ C0] EXT4-fs (loop3): last error at time 1776183745: ext4_orphan_get:1397: inode 15 [ 60.504360][ T3962] tmpfs: Bad value for 'mpol' [ 60.541719][ T3964] loop4: detected capacity change from 0 to 1024 [ 60.593204][ T3964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.607037][ T3952] loop3: lost filesystem error report for type 5 error -117 [ 60.607669][ T3952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.812985][ T3964] FAULT_INJECTION: forcing a failure. [ 60.812985][ T3964] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 60.826464][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 60.826531][ T28] audit: type=1400 audit(1776183746.230:247): avc: denied { read } for pid=3963 comm="syz.4.137" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.191725][ T3964] CPU: 1 UID: 0 PID: 3964 Comm: syz.4.137 Tainted: G W syzkaller #0 PREEMPT(full) [ 61.191771][ T3964] Tainted: [W]=WARN [ 61.191781][ T3964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 61.191797][ T3964] Call Trace: [ 61.191807][ T3964] [ 61.191817][ T3964] __dump_stack+0x1d/0x30 [ 61.191852][ T3964] dump_stack_lvl+0x95/0xd0 [ 61.191915][ T3964] dump_stack+0x15/0x1b [ 61.191948][ T3964] should_fail_ex+0x263/0x280 [ 61.191983][ T3964] should_fail_alloc_page+0xf2/0x100 [ 61.192056][ T3964] __alloc_frozen_pages_noprof+0x108/0x360 [ 61.192165][ T3964] alloc_pages_mpol+0xb3/0x260 [ 61.192197][ T3964] folio_alloc_noprof+0x96/0x150 [ 61.192241][ T3964] filemap_alloc_folio_noprof+0x92/0x220 [ 61.192323][ T3964] __filemap_get_folio_mpol+0x295/0x680 [ 61.192361][ T3964] ? ext4_chunk_trans_extent+0x178/0x1a0 [ 61.192462][ T3964] ext4_write_begin+0x2fa/0xea0 [ 61.192547][ T3964] ext4_da_write_begin+0x1f0/0x6c0 [ 61.192584][ T3964] ? inode_to_bdi+0x47/0xa0 [ 61.192605][ T3964] ? balance_dirty_pages_ratelimited_flags+0x420/0x800 [ 61.192675][ T3964] generic_perform_write+0x183/0x490 [ 61.192713][ T3964] ? file_update_time_flags+0x119/0x2e0 [ 61.192758][ T3964] ext4_buffered_write_iter+0x1ee/0x3c0 [ 61.192819][ T3964] ? ext4_file_write_iter+0x100/0xfa0 [ 61.192974][ T3964] ext4_file_write_iter+0x380/0xfa0 [ 61.193005][ T3964] ? kstrtouint_from_user+0xa8/0xf0 [ 61.193116][ T3964] ? __rcu_read_unlock+0x4e/0x70 [ 61.193173][ T3964] ? avc_policy_seqno+0x15/0x30 [ 61.193236][ T3964] ? selinux_file_permission+0x1e1/0x320 [ 61.193276][ T3964] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 61.193313][ T3964] vfs_write+0x5a6/0x9f0 [ 61.193405][ T3964] __x64_sys_pwrite64+0xfd/0x150 [ 61.193510][ T3964] x64_sys_call+0xa2a/0x3020 [ 61.193612][ T3964] do_syscall_64+0x12c/0x3b0 [ 61.193638][ T3964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.193660][ T3964] RIP: 0033:0x7f4505dcc819 [ 61.193676][ T3964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.193724][ T3964] RSP: 002b:00007f4504827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 61.193762][ T3964] RAX: ffffffffffffffda RBX: 00007f4506045fa0 RCX: 00007f4505dcc819 [ 61.193780][ T3964] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000005 [ 61.193797][ T3964] RBP: 00007f4504827090 R08: 0000000000000000 R09: 0000000000000000 [ 61.193860][ T3964] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000001 [ 61.193873][ T3964] R13: 00007f4506046038 R14: 00007f4506045fa0 R15: 00007ffdce620668 [ 61.193933][ T3964] [ 61.816756][ T28] audit: type=1400 audit(1776183746.610:248): avc: denied { map } for pid=3963 comm="syz.4.137" path="/12/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.839697][ T28] audit: type=1400 audit(1776183746.610:249): avc: denied { execute } for pid=3963 comm="syz.4.137" path="/12/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.053231][ T3891] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 62.289832][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.307611][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 62.484257][ T3984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=3984 comm=syz.2.142 [ 62.510195][ T3984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=3984 comm=syz.2.142 [ 62.523172][ T3984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=3984 comm=syz.2.142 [ 62.536886][ T3984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=3984 comm=syz.2.142 [ 62.549782][ T3984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=3984 comm=syz.2.142 [ 62.563517][ T3984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=3984 comm=syz.2.142 [ 62.599910][ T3952] EXT4-fs (loop3): shut down requested (1) [ 62.620173][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.665810][ T3996] netlink: 27 bytes leftover after parsing attributes in process `syz.2.146'. [ 62.679508][ T3998] loop3: detected capacity change from 0 to 1024 [ 62.701298][ T3998] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.710954][ T4000] netlink: 7 bytes leftover after parsing attributes in process `syz.4.147'. [ 62.711752][ T3998] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 62.731385][ T3998] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.145: lblock 2 mapped to illegal pblock 2 (length 1) [ 62.745923][ T3998] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 62.746002][ T3998] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 62.755104][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 62.755122][ C0] EXT4-fs (loop3): initial error at time 1776183748: ext4_map_blocks:791: inode 3: block 2 [ 62.755173][ C0] EXT4-fs (loop3): last error at time 1776183748: ext4_map_blocks:791: inode 3: block 2 [ 62.790223][ T3998] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.145: lblock 0 mapped to illegal pblock 48 (length 1) [ 62.796281][ T4003] tmpfs: Bad value for 'mpol' [ 62.804638][ T3998] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 62.810450][ T3998] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 62.828379][ T3998] EXT4-fs error (device loop3): ext4_acquire_dquot:7028: comm syz.3.145: Failed to acquire dquot type 0 [ 62.841959][ T3998] loop3: lost filesystem error report for type 5 error -117 [ 62.842075][ T3998] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6293: Corrupt filesystem [ 62.858986][ T3998] loop3: lost filesystem error report for type 5 error -117 [ 62.859105][ T3998] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.145: mark_inode_dirty error [ 62.877820][ T3998] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 62.877963][ T3998] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 62.897394][ T3998] EXT4-fs (loop3): 1 orphan inode deleted [ 62.903496][ T3998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.951295][ T28] audit: type=1400 audit(1776183748.370:250): avc: denied { execute } for pid=4007 comm="syz.0.151" dev="hugetlbfs" ino=5812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 62.982496][ T28] audit: type=1400 audit(1776183748.370:251): avc: denied { execute_no_trans } for pid=4007 comm="syz.0.151" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=5812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 63.035604][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.054881][ T55] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 63.067938][ T28] audit: type=1400 audit(1776183748.400:252): avc: denied { bind } for pid=3997 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.084380][ T55] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 63.121115][ T55] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 63.159919][ T55] EXT4-fs error (device loop3): ext4_release_dquot:7064: comm kworker/u8:4: Failed to release dquot type 0 [ 63.181543][ T28] audit: type=1400 audit(1776183748.510:253): avc: denied { setopt } for pid=4007 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.203979][ T55] loop3: lost filesystem error report for type 5 error -117 [ 63.205432][ T4018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.229821][ T4018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.238363][ T3313] EXT4-fs error (device loop3): __ext4_get_inode_loc:4799: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 63.251350][ T3313] loop3: lost filesystem error report for type 5 error -117 [ 63.251492][ T3313] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6293: Corrupt filesystem [ 63.259823][ T4018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.275782][ T4021] SELinux: failed to load policy [ 63.281948][ T3313] loop3: lost filesystem error report for type 5 error -117 [ 63.282064][ T3313] EXT4-fs error (device loop3): ext4_quota_off:7312: inode #3: comm syz-executor: mark_inode_dirty error [ 63.295766][ T4018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.324756][ T3313] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 63.412148][ T4011] lo speed is unknown, defaulting to 1000 [ 63.427931][ T4011] lo speed is unknown, defaulting to 1000 [ 63.433865][ T4011] lo speed is unknown, defaulting to 1000 [ 63.482737][ T4011] infiniband syz2: set active [ 63.487510][ T3376] lo speed is unknown, defaulting to 1000 [ 63.494905][ T4011] infiniband syz2: added lo [ 63.524281][ T4011] RDS/IB: syz2: added [ 63.528391][ T4011] smc: adding ib device syz2 with port count 1 [ 63.538581][ T4011] smc: ib device syz2 port 1 has no pnetid [ 63.544975][ T3376] lo speed is unknown, defaulting to 1000 [ 63.551028][ T4011] lo speed is unknown, defaulting to 1000 [ 63.566846][ T4030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 63.576157][ T4030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 63.586500][ T4030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 63.630317][ T4030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 63.644483][ T4030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 63.655911][ T4011] lo speed is unknown, defaulting to 1000 [ 63.668242][ T4030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 63.715916][ T4011] lo speed is unknown, defaulting to 1000 [ 63.728014][ T4030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 63.737009][ T4030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 63.798878][ T4011] lo speed is unknown, defaulting to 1000 [ 63.898469][ T4011] lo speed is unknown, defaulting to 1000 [ 63.937986][ T4011] lo speed is unknown, defaulting to 1000 [ 63.968522][ T4037] loop3: detected capacity change from 0 to 128 [ 64.039940][ T4037] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.061033][ T4011] lo speed is unknown, defaulting to 1000 [ 64.067550][ T4037] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.234242][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.310057][ T4066] loop2: detected capacity change from 0 to 1024 [ 64.321997][ T4066] EXT4-fs: Ignoring removed i_version option [ 64.335998][ T4066] EXT4-fs: Ignoring removed bh option [ 64.341490][ T4066] ext4: Unknown parameter 'noacl' [ 64.369743][ T4075] sctp: [Deprecated]: syz.4.168 (pid 4075) Use of int in max_burst socket option. [ 64.369743][ T4075] Use struct sctp_assoc_value instead [ 65.713569][ T4096] loop3: detected capacity change from 0 to 512 [ 65.737532][ T4096] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.843877][ T4096] EXT4-fs (loop3): 1 truncate cleaned up [ 65.888804][ T4096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.977067][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 65.977080][ T28] audit: type=1400 audit(1776183751.400:271): avc: denied { write } for pid=4095 comm="syz.3.176" path="/40/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 66.030414][ T4101] FAULT_INJECTION: forcing a failure. [ 66.030414][ T4101] name failslab, interval 1, probability 0, space 0, times 0 [ 66.078008][ T4103] netlink: 'syz.2.178': attribute type 3 has an invalid length. [ 66.111466][ T4101] CPU: 0 UID: 0 PID: 4101 Comm: syz.3.176 Tainted: G W syzkaller #0 PREEMPT(full) [ 66.111555][ T4101] Tainted: [W]=WARN [ 66.111562][ T4101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 66.111574][ T4101] Call Trace: [ 66.111636][ T4101] [ 66.111663][ T4101] __dump_stack+0x1d/0x30 [ 66.111695][ T4101] dump_stack_lvl+0x95/0xd0 [ 66.111726][ T4101] dump_stack+0x15/0x1b [ 66.111755][ T4101] should_fail_ex+0x263/0x280 [ 66.111861][ T4101] ? inode_doinit_use_xattr+0x3c/0x2d0 [ 66.111892][ T4101] should_failslab+0x8c/0xb0 [ 66.111976][ T4101] __kmalloc_cache_noprof+0x5f/0x410 [ 66.112007][ T4101] inode_doinit_use_xattr+0x3c/0x2d0 [ 66.112032][ T4101] inode_doinit_with_dentry+0x59f/0x7b0 [ 66.112057][ T4101] selinux_d_instantiate+0x27/0x40 [ 66.112081][ T4101] security_d_instantiate+0x76/0x90 [ 66.112107][ T4101] d_splice_alias_ops+0x53/0x320 [ 66.112186][ T4101] d_splice_alias+0x1f/0x30 [ 66.112288][ T4101] ext4_lookup+0x1a6/0x3a0 [ 66.112336][ T4101] __lookup_slow+0x19d/0x260 [ 66.112367][ T4101] lookup_slow+0x3c/0x60 [ 66.112433][ T4101] path_lookupat+0x2f7/0x500 [ 66.112464][ T4101] filename_lookup+0x190/0x390 [ 66.112527][ T4101] vfs_statx+0x96/0x170 [ 66.112613][ T4101] __se_sys_newlstat+0x66/0x3f0 [ 66.112698][ T4101] __x64_sys_newlstat+0x31/0x40 [ 66.112725][ T4101] x64_sys_call+0x1b8c/0x3020 [ 66.112757][ T4101] do_syscall_64+0x12c/0x3b0 [ 66.112800][ T4101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.112821][ T4101] RIP: 0033:0x7fda0d46c819 [ 66.112835][ T4101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.112862][ T4101] RSP: 002b:00007fda0bea6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 66.112882][ T4101] RAX: ffffffffffffffda RBX: 00007fda0d6e6090 RCX: 00007fda0d46c819 [ 66.112955][ T4101] RDX: 0000000000000000 RSI: 00002000000014c0 RDI: 0000200000000240 [ 66.112966][ T4101] RBP: 00007fda0bea6090 R08: 0000000000000000 R09: 0000000000000000 [ 66.112976][ T4101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.112986][ T4101] R13: 00007fda0d6e6128 R14: 00007fda0d6e6090 R15: 00007ffd515b90b8 [ 66.113007][ T4101] [ 66.394703][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.469386][ T1929] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.480241][ T1929] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.489713][ T1929] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.508207][ T1929] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.644707][ T28] audit: type=1400 audit(1776183752.050:272): avc: denied { mount } for pid=4110 comm="syz.2.181" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 66.704866][ T28] audit: type=1400 audit(1776183752.100:273): avc: denied { kexec_image_load } for pid=4110 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 66.820307][ T4121] loop3: detected capacity change from 0 to 512 [ 66.836802][ T28] audit: type=1400 audit(1776183752.220:274): avc: denied { read } for pid=4118 comm="syz.4.183" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 66.908586][ T4121] loop3: detected capacity change from 0 to 128 [ 66.973140][ T28] audit: type=1400 audit(1776183752.220:275): avc: denied { open } for pid=4118 comm="syz.4.183" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 67.005863][ T4123] loop0: detected capacity change from 0 to 2048 [ 67.059738][ T4123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.221451][ T28] audit: type=1400 audit(1776183752.220:276): avc: denied { ioctl } for pid=4118 comm="syz.4.183" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 67.312145][ T4137] random: crng reseeded on system resumption [ 67.329840][ T55] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 67.351045][ T28] audit: type=1400 audit(1776183752.430:277): avc: denied { ioctl } for pid=4124 comm="syz.4.186" path="socket:[6864]" dev="sockfs" ino=6864 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.378649][ T4137] loop4: detected capacity change from 0 to 512 [ 67.404372][ T4137] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.414435][ T55] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 434 with error 28 [ 67.450235][ T4137] EXT4-fs (loop4): 1 truncate cleaned up [ 67.460757][ T55] EXT4-fs (loop0): This should not happen!! Data will be lost [ 67.460757][ T55] [ 67.473107][ T4137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.485243][ T28] audit: type=1400 audit(1776183752.450:278): avc: denied { getopt } for pid=4124 comm="syz.4.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.505143][ T55] EXT4-fs (loop0): Total free blocks count 0 [ 67.517080][ T4140] loop1: detected capacity change from 0 to 512 [ 67.517964][ T55] EXT4-fs (loop0): Free/Dirty block details [ 67.533459][ T28] audit: type=1400 audit(1776183752.620:279): avc: denied { create } for pid=4130 comm="syz.4.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.541126][ T55] EXT4-fs (loop0): free_blocks=66060288 [ 67.559456][ T4137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.570082][ T55] EXT4-fs (loop0): dirty_blocks=448 [ 67.582968][ T55] EXT4-fs (loop0): Block reservation details [ 67.589500][ T55] EXT4-fs (loop0): i_reserved_data_blocks=28 [ 67.595036][ T28] audit: type=1400 audit(1776183752.620:280): avc: denied { bind } for pid=4130 comm="syz.4.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.607882][ T3315] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 67.648573][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.679048][ T4148] FAULT_INJECTION: forcing a failure. [ 67.679048][ T4148] name failslab, interval 1, probability 0, space 0, times 0 [ 67.706098][ T4148] CPU: 1 UID: 0 PID: 4148 Comm: syz.3.194 Tainted: G W syzkaller #0 PREEMPT(full) [ 67.706200][ T4148] Tainted: [W]=WARN [ 67.706225][ T4148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 67.706240][ T4148] Call Trace: [ 67.706246][ T4148] [ 67.706253][ T4148] __dump_stack+0x1d/0x30 [ 67.706325][ T4148] dump_stack_lvl+0x95/0xd0 [ 67.706355][ T4148] dump_stack+0x15/0x1b [ 67.706382][ T4148] should_fail_ex+0x263/0x280 [ 67.706416][ T4148] should_failslab+0x8c/0xb0 [ 67.706508][ T4148] __kmalloc_noprof+0xb8/0x4e0 [ 67.706537][ T4148] ? inotify_handle_inode_event+0x124/0x3d0 [ 67.706608][ T4148] inotify_handle_inode_event+0x124/0x3d0 [ 67.706635][ T4148] ? __pfx_inotify_handle_inode_event+0x10/0x10 [ 67.706662][ T4148] fsnotify_handle_inode_event+0x1c0/0x220 [ 67.706729][ T4148] fsnotify+0x15d0/0x1730 [ 67.706782][ T4148] __fsnotify_parent+0x2f8/0x3a0 [ 67.706818][ T4148] __fput+0x1de/0x630 [ 67.706852][ T4148] fput_close_sync+0xad/0x190 [ 67.706882][ T4148] __x64_sys_close+0x55/0xf0 [ 67.706995][ T4148] x64_sys_call+0x275d/0x3020 [ 67.707028][ T4148] do_syscall_64+0x12c/0x3b0 [ 67.707052][ T4148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.707156][ T4148] RIP: 0033:0x7fda0d46c819 [ 67.707172][ T4148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.707211][ T4148] RSP: 002b:00007fda0bec7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 67.707231][ T4148] RAX: ffffffffffffffda RBX: 00007fda0d6e5fa0 RCX: 00007fda0d46c819 [ 67.707246][ T4148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 67.707260][ T4148] RBP: 00007fda0bec7090 R08: 0000000000000000 R09: 0000000000000000 [ 67.707273][ T4148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.707314][ T4148] R13: 00007fda0d6e6038 R14: 00007fda0d6e5fa0 R15: 00007ffd515b90b8 [ 67.707335][ T4148] [ 68.104354][ T4154] lo speed is unknown, defaulting to 1000 [ 68.118804][ T4152] loop2: detected capacity change from 0 to 1024 [ 68.125721][ T4152] EXT4-fs: test_dummy_encryption option not supported [ 69.129930][ T4170] program syz.4.199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.198648][ T4173] loop4: detected capacity change from 0 to 128 [ 69.229442][ T4173] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.265113][ T4177] lo speed is unknown, defaulting to 1000 [ 69.317159][ T4181] __nla_validate_parse: 6 callbacks suppressed [ 69.317173][ T4181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.202'. [ 69.375022][ T4173] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.497538][ T3318] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.572928][ T4175] loop0: detected capacity change from 0 to 512 [ 69.662326][ T4195] FAULT_INJECTION: forcing a failure. [ 69.662326][ T4195] name failslab, interval 1, probability 0, space 0, times 0 [ 69.684837][ T4195] CPU: 1 UID: 0 PID: 4195 Comm: syz.0.201 Tainted: G W syzkaller #0 PREEMPT(full) [ 69.684863][ T4195] Tainted: [W]=WARN [ 69.684943][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 69.684954][ T4195] Call Trace: [ 69.684959][ T4195] [ 69.684966][ T4195] __dump_stack+0x1d/0x30 [ 69.684995][ T4195] dump_stack_lvl+0x95/0xd0 [ 69.685021][ T4195] dump_stack+0x15/0x1b [ 69.685042][ T4195] should_fail_ex+0x263/0x280 [ 69.685132][ T4195] should_failslab+0x8c/0xb0 [ 69.685277][ T4195] kmem_cache_alloc_noprof+0x66/0x400 [ 69.685304][ T4195] ? audit_log_start+0x34c/0x730 [ 69.685322][ T4195] ? fixup_exception+0x742/0xce0 [ 69.685338][ T4195] audit_log_start+0x34c/0x730 [ 69.685365][ T4195] audit_seccomp+0x47/0x100 [ 69.685463][ T4195] ? __seccomp_filter+0x8db/0x1350 [ 69.685489][ T4195] __seccomp_filter+0x8ec/0x1350 [ 69.685523][ T4195] ? lookup_ioctx+0x26/0x1e0 [ 69.685641][ T4195] ? __get_user_nocheck_8+0x20/0x20 [ 69.685669][ T4195] __secure_computing+0x81/0x150 [ 69.685757][ T4195] do_syscall_64+0xce/0x3b0 [ 69.685807][ T4195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.685852][ T4195] RIP: 0033:0x7fb9d9d0d04e [ 69.685922][ T4195] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 69.685945][ T4195] RSP: 002b:00007fb9d877dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 69.685963][ T4195] RAX: ffffffffffffffda RBX: 00007fb9d877e6c0 RCX: 00007fb9d9d0d04e [ 69.685977][ T4195] RDX: 000000000000000f RSI: 00007fb9d877e0a0 RDI: 0000000000000007 [ 69.685988][ T4195] RBP: 00007fb9d877e090 R08: 0000000000000000 R09: 0000000000000000 [ 69.685998][ T4195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.686008][ T4195] R13: 00007fb9d9fc6128 R14: 00007fb9d9fc6090 R15: 00007ffc2e0b14b8 [ 69.686028][ T4195] [ 69.885589][ T4193] loop4: detected capacity change from 0 to 512 [ 70.340957][ T4210] netlink: 'syz.3.210': attribute type 64 has an invalid length. [ 70.387454][ T4213] 9p: Bad value for 'rfdno' [ 70.414706][ T4213] netlink: 68 bytes leftover after parsing attributes in process `syz.4.209'. [ 71.102790][ T28] kauditd_printk_skb: 136 callbacks suppressed [ 71.102805][ T28] audit: type=1400 audit(1776183756.520:415): avc: denied { ioctl } for pid=4232 comm="syz.4.219" path="socket:[7123]" dev="sockfs" ino=7123 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.153096][ T55] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.176487][ T55] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.194933][ T28] audit: type=1400 audit(1776183756.550:416): avc: denied { block_suspend } for pid=4232 comm="syz.4.219" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.217160][ T55] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.225972][ T55] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.328948][ T28] audit: type=1400 audit(1776183756.740:417): avc: denied { ioctl } for pid=4234 comm="syz.0.220" path="socket:[6100]" dev="sockfs" ino=6100 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.756462][ T4253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.226'. [ 71.787455][ T4255] loop3: detected capacity change from 0 to 512 [ 71.820576][ T4255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.850207][ T4255] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.887797][ T4255] netlink: 64 bytes leftover after parsing attributes in process `syz.3.225'. [ 71.900861][ T28] audit: type=1400 audit(1776183757.310:418): avc: denied { create } for pid=4254 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 71.953637][ T4255] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.225: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 72.008058][ T4255] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 12: comm syz.3.225: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 72.041072][ T4255] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 13: comm syz.3.225: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 72.066410][ T28] audit: type=1400 audit(1776183757.490:419): avc: denied { bind } for pid=4261 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.106538][ T4255] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 16: comm syz.3.225: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653245223, rec_len=65536, size=2048 fake=0 [ 72.112937][ T4265] loop4: detected capacity change from 0 to 2048 [ 72.133638][ T28] audit: type=1400 audit(1776183757.490:420): avc: denied { name_bind } for pid=4261 comm="syz.0.227" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 72.174759][ T28] audit: type=1400 audit(1776183757.490:421): avc: denied { node_bind } for pid=4261 comm="syz.0.227" saddr=fc00:: src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 72.208888][ T28] audit: type=1400 audit(1776183757.510:422): avc: denied { create } for pid=4261 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.230353][ T4255] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 18: comm syz.3.225: lblock 23 mapped to illegal pblock 18 (length 1) [ 72.244795][ T28] audit: type=1400 audit(1776183757.510:423): avc: denied { ioctl } for pid=4261 comm="syz.0.227" path="socket:[7188]" dev="sockfs" ino=7188 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.279989][ T4265] loop4: p1 p2 p3 [ 72.329049][ T28] audit: type=1400 audit(1776183757.520:424): avc: denied { read } for pid=4261 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.359872][ T4267] netlink: 24 bytes leftover after parsing attributes in process `syz.4.228'. [ 72.383693][ T4267] netlink: 16 bytes leftover after parsing attributes in process `syz.4.228'. [ 72.704468][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.959048][ T4278] loop0: detected capacity change from 0 to 128 [ 72.992733][ T4278] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.039450][ T4278] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.169889][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.347697][ T4291] loop0: detected capacity change from 0 to 512 [ 73.354340][ T4291] EXT4-fs: Ignoring removed nobh option [ 73.364807][ T4291] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.381500][ T4291] EXT4-fs (loop0): orphan cleanup on readonly fs [ 73.395012][ T4291] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 73.468119][ T4293] loop4: detected capacity change from 0 to 512 [ 73.548574][ T4291] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.234: attempt to clear invalid blocks 2 len 1 [ 73.597559][ T4293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.610158][ T4293] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.786295][ T4291] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 73.787626][ T4291] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, [ 73.796829][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 73.796850][ C1] EXT4-fs (loop0): initial error at time 1776183759: ext4_clear_blocks:876: inode 13 [ 73.796872][ C1] EXT4-fs (loop0): last error at time 1776183759: ext4_clear_blocks:876: inode 13 [ 73.830556][ T4291] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 73.951008][ T4291] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.234: invalid indirect mapped block 1819239214 (level 0) [ 74.000667][ T4291] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 74.001156][ T4291] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.234: invalid indirect mapped block 1819239214 (level 1) [ 74.074811][ T4291] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 74.091170][ T4291] EXT4-fs (loop0): 1 truncate cleaned up [ 74.146820][ T4307] loop3: detected capacity change from 0 to 128 [ 74.153573][ T4291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.165500][ T4307] vfat: Unknown parameter '18446744073709551615000000000000000000000001844674407370955161518446744073709551615uI[ sq [ 74.165500][ T4307] |^ĕ&k_NN7*Z' [ 74.239027][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.253693][ T4291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.234'. [ 74.373863][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.391555][ T4320] syzkaller0: entered promiscuous mode [ 74.397094][ T4320] syzkaller0: entered allmulticast mode [ 74.462138][ T4322] lo speed is unknown, defaulting to 1000 [ 74.476911][ T4327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'. [ 74.519548][ T4258] syz.1.226 (4258) used greatest stack depth: 8640 bytes left [ 74.589503][ T4332] netlink: 'syz.0.250': attribute type 1 has an invalid length. [ 74.597639][ T4332] netlink: 'syz.0.250': attribute type 3 has an invalid length. [ 74.616568][ T4333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.249'. [ 74.620852][ T4332] netlink: 132 bytes leftover after parsing attributes in process `syz.0.250'. [ 74.650150][ T4335] loop1: detected capacity change from 0 to 256 [ 74.668954][ T4335] vfat: Unknown parameter 'iocharsetJdefault' [ 75.190700][ T4341] syzkaller0: entered promiscuous mode [ 75.196389][ T4341] syzkaller0: entered allmulticast mode [ 75.368394][ T4346] loop1: detected capacity change from 0 to 512 [ 75.441468][ T4346] EXT4-fs: Ignoring removed i_version option [ 75.460675][ T4346] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.542363][ T4346] EXT4-fs (loop1): unsupported inode size: 0 [ 75.555011][ T4346] EXT4-fs (loop1): blocksize: 1024 [ 75.707484][ T4356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.257'. [ 75.746215][ T4365] loop1: detected capacity change from 0 to 512 [ 75.768107][ T4365] EXT4-fs: Mount option(s) incompatible with ext2 [ 76.068578][ T4375] loop2: detected capacity change from 0 to 512 [ 76.166257][ T4375] msdos: Bad value for 'time_offset' [ 76.293744][ T4383] loop3: detected capacity change from 0 to 512 [ 76.313088][ T4385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.268'. [ 76.347365][ T4385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.268'. [ 76.367025][ T4383] loop3: detected capacity change from 0 to 512 [ 76.380946][ T4387] loop4: detected capacity change from 0 to 128 [ 76.410953][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.420256][ T4383] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 76.438795][ T4387] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (b9880000) [ 76.442096][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.480138][ T4383] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.501216][ T4378] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.508607][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 76.508621][ T28] audit: type=1400 audit(1776183761.910:434): avc: denied { create } for pid=4384 comm="syz.4.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 76.534080][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.548579][ T4378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.566415][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.582105][ T4383] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #4: comm syz.3.267: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 76.602828][ T28] audit: type=1400 audit(1776183761.910:435): avc: denied { write } for pid=4384 comm="syz.4.268" path="socket:[7423]" dev="sockfs" ino=7423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 76.602912][ T4383] loop3: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 76.603250][ T4383] EXT4-fs error (device loop3): ext4_quota_enable:7222: comm syz.3.267: Bad quota inode: 4, type: 1 [ 76.603282][ T4383] loop3: lost filesystem error report for type 5 error -117 [ 76.603408][ T4383] EXT4-fs warning (device loop3): ext4_enable_quotas:7263: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.603512][ T4383] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 76.611398][ T4378] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 76.693956][ T4383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.693973][ T4394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4394 comm=syz.4.270 [ 76.706740][ T4394] EXT4-fs: test_dummy_encryption option not supported [ 76.775331][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.797342][ T4378] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #11: comm syz.0.264: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 76.833851][ T4378] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 76.835143][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 76.851540][ C0] EXT4-fs (loop0): initial error at time 1776183762: ext4_ext_check_inode:521: inode 11 [ 76.862465][ C0] EXT4-fs (loop0): last error at time 1776183762: ext4_ext_check_inode:521: inode 11 [ 76.893390][ T4378] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.264: couldn't read orphan inode 11 (err -117) [ 76.909495][ T4400] netlink: 32 bytes leftover after parsing attributes in process `syz.4.273'. [ 76.925854][ T4378] loop0: lost filesystem error report for type 5 error -117 [ 76.947966][ T4378] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.973997][ T4400] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 77.446741][ T4400] 9p: Could not find request transport: Hd [ 77.504005][ T4378] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.573578][ T4414] xt_connbytes: Forcing CT accounting to be enabled [ 77.584790][ T4414] Cannot find set identified by id 0 to match [ 77.639583][ T28] audit: type=1400 audit(1776183763.060:436): avc: denied { setopt } for pid=4422 comm="syz.3.281" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.660902][ T4421] netlink: 48 bytes leftover after parsing attributes in process `syz.0.280'. [ 77.685819][ T28] audit: type=1400 audit(1776183763.090:437): avc: denied { connect } for pid=4422 comm="syz.3.281" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.715200][ T4428] msdos: Bad value for 'time_offset' [ 77.732306][ T28] audit: type=1400 audit(1776183763.150:438): avc: denied { write } for pid=4424 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 77.782894][ T28] audit: type=1400 audit(1776183763.200:439): avc: denied { create } for pid=4416 comm="syz.4.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 77.807942][ T28] audit: type=1400 audit(1776183763.230:440): avc: denied { setopt } for pid=4416 comm="syz.4.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 77.991251][ T28] audit: type=1400 audit(1776183763.260:441): avc: denied { getopt } for pid=4416 comm="syz.4.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 78.563200][ T4452] netlink: 20 bytes leftover after parsing attributes in process `syz.4.290'. [ 78.583885][ T4451] mmap: syz.1.289 (4451): VmData 29114368 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data. [ 78.686191][ T28] audit: type=1400 audit(1776183764.100:442): avc: denied { create } for pid=4453 comm="syz.2.291" name=01 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.845232][ T4464] netlink: 'syz.0.293': attribute type 2 has an invalid length. [ 78.893892][ T4464] netlink: 132 bytes leftover after parsing attributes in process `syz.0.293'. [ 78.969295][ T28] audit: type=1400 audit(1776183764.390:443): avc: denied { read } for pid=4469 comm="syz.3.297" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 79.005782][ T4472] netlink: 'syz.0.296': attribute type 64 has an invalid length. [ 81.949188][ T4506] netlink: 32 bytes leftover after parsing attributes in process `syz.2.306'. [ 82.296007][ T4506] set_capacity_and_notify: 4 callbacks suppressed [ 82.296432][ T4506] loop2: detected capacity change from 0 to 512 [ 82.403358][ T4506] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 82.419930][ T4506] 9p: Bad value for 'wfdno' [ 82.506686][ T4522] tmpfs: Bad value for 'mpol' [ 82.546864][ T4529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.315'. [ 82.585476][ T4532] loop4: detected capacity change from 0 to 128 [ 82.644863][ T4532] FAT-fs (loop4): bogus number of reserved sectors [ 82.651412][ T4532] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 82.694815][ T4532] FAT-fs (loop4): Can't find a valid FAT filesystem [ 82.764571][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 82.771300][ T28] audit: type=1400 audit(1776183768.160:447): avc: denied { write } for pid=4536 comm="syz.1.319" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 83.155774][ T4549] syz.3.321 uses obsolete (PF_INET,SOCK_PACKET) [ 83.366436][ T4555] netlink: 'syz.1.322': attribute type 12 has an invalid length. [ 83.380640][ T4549] loop3: detected capacity change from 0 to 128 [ 83.403696][ T4555] netlink: 'syz.1.322': attribute type 29 has an invalid length. [ 83.434813][ T4555] netlink: 148 bytes leftover after parsing attributes in process `syz.1.322'. [ 83.468692][ T4549] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 83.502508][ T4558] netlink: 32 bytes leftover after parsing attributes in process `syz.2.323'. [ 83.508601][ T4552] bond1: option lacp_rate: invalid value (112) [ 83.538150][ T28] audit: type=1400 audit(1776183768.960:448): avc: denied { write } for pid=4548 comm="syz.3.321" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.560841][ T4559] loop2: detected capacity change from 0 to 512 [ 83.561491][ T4559] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 83.598679][ T4552] bond1 (unregistering): Released all slaves [ 83.615911][ T4561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.324'. [ 83.661275][ T4558] 9p: Bad value for 'wfdno' [ 83.682601][ T4561] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4561 comm=syz.4.324 [ 83.754855][ T28] audit: type=1400 audit(1776183769.170:449): avc: denied { remount } for pid=4560 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 83.798602][ T4567] netlink: 16 bytes leftover after parsing attributes in process `syz.3.326'. [ 83.854215][ T4574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.327'. [ 84.033381][ T4580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'. [ 84.068838][ T4580] bond0: Unable to set up delay as MII monitoring is disabled [ 84.105693][ T4588] FAULT_INJECTION: forcing a failure. [ 84.105693][ T4588] name failslab, interval 1, probability 0, space 0, times 0 [ 84.129737][ T4588] CPU: 0 UID: 0 PID: 4588 Comm: syz.1.334 Tainted: G W syzkaller #0 PREEMPT(full) [ 84.129773][ T4588] Tainted: [W]=WARN [ 84.129782][ T4588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 84.129798][ T4588] Call Trace: [ 84.129805][ T4588] [ 84.129821][ T4588] __dump_stack+0x1d/0x30 [ 84.129847][ T4588] dump_stack_lvl+0x95/0xd0 [ 84.129875][ T4588] dump_stack+0x15/0x1b [ 84.129904][ T4588] should_fail_ex+0x263/0x280 [ 84.129987][ T4588] should_failslab+0x8c/0xb0 [ 84.130016][ T4588] __kmalloc_noprof+0xb8/0x4e0 [ 84.130047][ T4588] ? nft_set_elem_expr_clone+0x91/0x280 [ 84.130144][ T4588] nft_set_elem_expr_clone+0x91/0x280 [ 84.130169][ T4588] nf_tables_newsetelem+0xfa1/0x2d70 [ 84.130245][ T4588] ? nf_tables_newsetelem+0x941/0x2d70 [ 84.130368][ T4588] ? mutex_unlock+0x4e/0x90 [ 84.130424][ T4588] nfnetlink_rcv+0xc1e/0x1720 [ 84.130552][ T4588] netlink_unicast+0x5c0/0x690 [ 84.130584][ T4588] netlink_sendmsg+0x5c8/0x6f0 [ 84.130644][ T4588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.130704][ T4588] ____sys_sendmsg+0x563/0x5b0 [ 84.130736][ T4588] ___sys_sendmsg+0x195/0x1e0 [ 84.130786][ T4588] __x64_sys_sendmsg+0xd4/0x160 [ 84.130893][ T4588] x64_sys_call+0x194c/0x3020 [ 84.130933][ T4588] do_syscall_64+0x12c/0x3b0 [ 84.130956][ T4588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.130977][ T4588] RIP: 0033:0x7f55d339c819 [ 84.130990][ T4588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.131026][ T4588] RSP: 002b:00007f55d1def028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.131044][ T4588] RAX: ffffffffffffffda RBX: 00007f55d3615fa0 RCX: 00007f55d339c819 [ 84.131056][ T4588] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 84.131070][ T4588] RBP: 00007f55d1def090 R08: 0000000000000000 R09: 0000000000000000 [ 84.131081][ T4588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.131092][ T4588] R13: 00007f55d3616038 R14: 00007f55d3615fa0 R15: 00007ffcafd79a08 [ 84.131111][ T4588] [ 84.176725][ T4591] netlink: 'syz.4.333': attribute type 36 has an invalid length. [ 84.198076][ T4593] netlink: 20 bytes leftover after parsing attributes in process `syz.2.335'. [ 84.233226][ T4591] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.287852][ T28] audit: type=1400 audit(1776183769.670:450): avc: denied { write } for pid=4585 comm="syz.4.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.401835][ T4591] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 84.668686][ T4599] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 84.791872][ T4591] loop4: detected capacity change from 0 to 256 [ 84.838773][ T28] audit: type=1400 audit(1776183770.070:451): avc: denied { ioctl } for pid=4585 comm="syz.4.333" path="socket:[7735]" dev="sockfs" ino=7735 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.877466][ T4605] loop1: detected capacity change from 0 to 512 [ 84.925508][ T4605] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 84.932110][ T4605] EXT4-fs (loop1): mount failed [ 84.989231][ T28] audit: type=1400 audit(1776183770.400:452): avc: denied { ioctl } for pid=4604 comm="syz.1.339" path="socket:[8690]" dev="sockfs" ino=8690 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 85.029951][ T28] audit: type=1400 audit(1776183770.400:453): avc: denied { sqpoll } for pid=4604 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 85.111085][ T4629] loop4: detected capacity change from 0 to 2048 [ 85.143731][ T4629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.202808][ T28] audit: type=1400 audit(1776183770.620:454): avc: denied { add_name } for pid=4628 comm="syz.4.343" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 85.363823][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.477259][ T28] audit: type=1400 audit(1776183770.900:455): avc: denied { create } for pid=4665 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.072175][ T4675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'. [ 86.295073][ T4678] tmpfs: Bad value for 'mpol' [ 86.476345][ T4694] loop2: detected capacity change from 0 to 256 [ 86.489233][ T4694] SELinux: failed to load policy [ 86.622375][ T4703] siw: device registration error -23 [ 86.637624][ T4707] tmpfs: Bad value for 'mpol' [ 86.708522][ T28] audit: type=1400 audit(1776183772.120:456): avc: denied { name_bind } for pid=4699 comm="syz.1.367" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 86.735382][ T4715] loop4: detected capacity change from 0 to 512 [ 86.756295][ T4715] ext4: Unknown parameter 'audit' [ 87.152250][ T4737] tmpfs: Bad value for 'mpol' [ 87.267364][ T4735] sd 0:0:1:0: device reset [ 87.272419][ T4735] __nla_validate_parse: 2 callbacks suppressed [ 87.272434][ T4735] netlink: 5668 bytes leftover after parsing attributes in process `syz.4.381'. [ 87.317376][ T4703] loop2: detected capacity change from 0 to 8192 [ 87.437141][ T4743] syzkaller0: entered promiscuous mode [ 87.442715][ T4743] syzkaller0: entered allmulticast mode [ 87.588541][ T4751] syzkaller0: entered promiscuous mode [ 87.594148][ T4751] syzkaller0: entered allmulticast mode [ 87.872114][ T4763] tmpfs: Bad value for 'mpol' [ 88.004766][ T4773] netlink: 'syz.1.397': attribute type 10 has an invalid length. [ 88.012566][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 88.012582][ T28] audit: type=1400 audit(1776183773.430:461): avc: denied { read write } for pid=4748 comm="syz.4.387" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 88.075889][ T28] audit: type=1400 audit(1776183773.430:462): avc: denied { open } for pid=4748 comm="syz.4.387" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 88.318223][ T4783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.401'. [ 88.374075][ T4788] sctp: [Deprecated]: syz.0.402 (pid 4788) Use of struct sctp_assoc_value in delayed_ack socket option. [ 88.374075][ T4788] Use struct sctp_sack_info instead [ 88.410252][ T4791] lo speed is unknown, defaulting to 1000 [ 88.452680][ T28] audit: type=1400 audit(1776183773.870:463): avc: denied { append } for pid=4790 comm="syz.1.403" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 88.479960][ T4793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4793 comm=syz.1.403 [ 88.571054][ T28] audit: type=1400 audit(1776183773.990:464): avc: denied { write } for pid=4787 comm="syz.0.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 88.699582][ T4802] tmpfs: Bad value for 'mpol' [ 89.302400][ T4812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.409'. [ 90.073692][ T4833] lo speed is unknown, defaulting to 1000 [ 90.325541][ T4839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.419'. [ 90.365029][ T4839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.419'. [ 90.594225][ T4853] netlink: 'syz.1.426': attribute type 12 has an invalid length. [ 90.605295][ T28] audit: type=1326 audit(1776183776.030:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d9d4c819 code=0x7ffc0000 [ 90.662062][ T28] audit: type=1326 audit(1776183776.030:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d9d4c819 code=0x7ffc0000 [ 90.690274][ T4857] loop2: detected capacity change from 0 to 764 [ 90.720981][ T4857] FAULT_INJECTION: forcing a failure. [ 90.720981][ T4857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.742524][ T28] audit: type=1326 audit(1776183776.040:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d9d4c819 code=0x7ffc0000 [ 90.755189][ T4857] CPU: 1 UID: 0 PID: 4857 Comm: syz.2.428 Tainted: G W syzkaller #0 PREEMPT(full) [ 90.755321][ T4857] Tainted: [W]=WARN [ 90.755343][ T4857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 90.755402][ T4857] Call Trace: [ 90.755443][ T4857] [ 90.755515][ T4857] __dump_stack+0x1d/0x30 [ 90.755601][ T4857] dump_stack_lvl+0x95/0xd0 [ 90.755706][ T4857] dump_stack+0x15/0x1b [ 90.755774][ T4857] should_fail_ex+0x263/0x280 [ 90.755930][ T4857] should_fail+0xb/0x20 [ 90.756080][ T4857] should_fail_usercopy+0x1a/0x20 [ 90.756168][ T4857] strncpy_from_user+0x27/0x250 [ 90.756242][ T4857] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 90.756331][ T4857] do_getname+0x59/0x1c0 [ 90.756417][ T4857] getname_flags+0x1d/0x30 [ 90.756493][ T4857] do_sys_openat2+0x60/0x130 [ 90.756679][ T4857] __x64_sys_openat+0xf2/0x120 [ 90.756807][ T4857] x64_sys_call+0x1e39/0x3020 [ 90.756894][ T4857] do_syscall_64+0x12c/0x3b0 [ 90.756974][ T4857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.757080][ T4857] RIP: 0033:0x7fe26906c819 [ 90.757191][ T4857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.757254][ T4857] RSP: 002b:00007fe267ac7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 90.757331][ T4857] RAX: ffffffffffffffda RBX: 00007fe2692e5fa0 RCX: 00007fe26906c819 [ 90.757375][ T4857] RDX: 0000000000080143 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 90.757460][ T4857] RBP: 00007fe267ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 90.757503][ T4857] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000001 [ 90.757544][ T4857] R13: 00007fe2692e6038 R14: 00007fe2692e5fa0 R15: 00007ffe80f0a848 [ 90.757660][ T4857] [ 90.810078][ T4864] loop3: detected capacity change from 0 to 512 [ 90.815041][ T28] audit: type=1326 audit(1776183776.040:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d9d4c819 code=0x7ffc0000 [ 90.911114][ T4864] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 91.011095][ T28] audit: type=1326 audit(1776183776.050:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fb9d9d4c819 code=0x7ffc0000 [ 91.040984][ T4872] 9p: Bad value for 'rfdno' [ 91.061387][ T4864] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.430: inode has both inline data and extents flags [ 91.181190][ T4864] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 91.181361][ T4864] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.430: couldn't read orphan inode 15 (err -117) [ 91.190710][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 91.190729][ C0] EXT4-fs (loop3): initial error at time 1776183776: ext4_orphan_get:1397: inode 15 [ 91.190773][ C0] EXT4-fs (loop3): last error at time 1776183776: ext4_orphan_get:1397: inode 15 [ 91.227953][ T28] audit: type=1326 audit(1776183776.050:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d9d4c819 code=0x7ffc0000 [ 91.228243][ T4864] loop3: lost filesystem error report for type 5 error -117 [ 91.256036][ T4864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.325381][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.382816][ T4884] loop3: detected capacity change from 0 to 512 [ 91.514324][ T4884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.629833][ T4884] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.717526][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.898622][ T4903] bond1: entered promiscuous mode [ 91.929308][ T4903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.947930][ T4909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.442'. [ 92.036478][ T4911] bond1 (unregistering): Released all slaves [ 92.224524][ T4921] loop3: detected capacity change from 0 to 764 [ 92.520124][ T4935] Cannot find set identified by id 0 to match [ 92.548883][ T4940] FAULT_INJECTION: forcing a failure. [ 92.548883][ T4940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.562217][ T4940] CPU: 1 UID: 0 PID: 4940 Comm: syz.4.454 Tainted: G W syzkaller #0 PREEMPT(full) [ 92.562256][ T4940] Tainted: [W]=WARN [ 92.562291][ T4940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 92.562387][ T4940] Call Trace: [ 92.562396][ T4940] [ 92.562405][ T4940] __dump_stack+0x1d/0x30 [ 92.562438][ T4940] dump_stack_lvl+0x95/0xd0 [ 92.562489][ T4940] dump_stack+0x15/0x1b [ 92.562514][ T4940] should_fail_ex+0x263/0x280 [ 92.562570][ T4940] should_fail+0xb/0x20 [ 92.562606][ T4940] should_fail_usercopy+0x1a/0x20 [ 92.562659][ T4940] _copy_from_user+0x1c/0xb0 [ 92.562691][ T4940] do_ip6t_set_ctl+0x3b2/0x8f0 [ 92.562728][ T4940] ? kstrtoull+0x111/0x140 [ 92.562764][ T4940] ? __rcu_read_unlock+0x4e/0x70 [ 92.562848][ T4940] nf_setsockopt+0x199/0x1b0 [ 92.562898][ T4940] ipv6_setsockopt+0x11a/0x130 [ 92.562924][ T4940] tcp_setsockopt+0x98/0xb0 [ 92.562986][ T4940] sock_common_setsockopt+0x69/0x80 [ 92.563008][ T4940] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 92.563103][ T4940] __sys_setsockopt+0x184/0x200 [ 92.563199][ T4940] __x64_sys_setsockopt+0x64/0x80 [ 92.563231][ T4940] x64_sys_call+0x2327/0x3020 [ 92.563256][ T4940] do_syscall_64+0x12c/0x3b0 [ 92.563275][ T4940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.563365][ T4940] RIP: 0033:0x7f4505dcc819 [ 92.563378][ T4940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.563471][ T4940] RSP: 002b:00007f4504827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 92.563491][ T4940] RAX: ffffffffffffffda RBX: 00007f4506045fa0 RCX: 00007f4505dcc819 [ 92.563506][ T4940] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 92.563584][ T4940] RBP: 00007f4504827090 R08: 0000000000000438 R09: 0000000000000000 [ 92.563599][ T4940] R10: 0000200000000c40 R11: 0000000000000246 R12: 0000000000000001 [ 92.563613][ T4940] R13: 00007f4506046038 R14: 00007f4506045fa0 R15: 00007ffdce620668 [ 92.563630][ T4940] [ 93.254771][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 93.254784][ T28] audit: type=1326 audit(1776183778.670:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4939 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4505d8d04e code=0x7ffc0000 [ 93.284498][ T28] audit: type=1326 audit(1776183778.670:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4939 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4505d8d04e code=0x7ffc0000 [ 93.308570][ T28] audit: type=1326 audit(1776183778.680:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4939 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4505d8d04e code=0x7ffc0000 [ 93.332107][ T28] audit: type=1326 audit(1776183778.680:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4939 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4505d8d04e code=0x7ffc0000 [ 93.355543][ T28] audit: type=1326 audit(1776183778.690:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4939 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4505d8d04e code=0x7ffc0000 [ 93.380501][ T28] audit: type=1326 audit(1776183778.690:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4939 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4505d8d04e code=0x7ffc0000 [ 93.403990][ T28] audit: type=1326 audit(1776183778.700:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4939 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4505d8d04e code=0x7ffc0000 [ 93.464215][ T28] audit: type=1326 audit(1776183778.730:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4939 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4505d8d04e code=0x7ffc0000 [ 93.524823][ T28] audit: type=1326 audit(1776183778.800:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4939 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4505d8d04e code=0x7ffc0000 [ 93.548267][ T28] audit: type=1326 audit(1776183778.850:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4939 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4505dcc819 code=0x7ffc0000 [ 94.825176][ T4989] loop4: detected capacity change from 0 to 512 [ 94.857507][ T4989] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 94.905407][ T4989] EXT4-fs (loop4): 1 truncate cleaned up [ 94.937050][ T4989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.067658][ T5008] syzkaller0: entered promiscuous mode [ 95.123000][ T5008] syzkaller0: entered allmulticast mode [ 95.345070][ T5020] FAULT_INJECTION: forcing a failure. [ 95.345070][ T5020] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 95.411139][ T5020] CPU: 1 UID: 0 PID: 5020 Comm: syz.2.476 Tainted: G W syzkaller #0 PREEMPT(full) [ 95.411175][ T5020] Tainted: [W]=WARN [ 95.411183][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 95.411198][ T5020] Call Trace: [ 95.411205][ T5020] [ 95.411214][ T5020] __dump_stack+0x1d/0x30 [ 95.411243][ T5020] dump_stack_lvl+0x95/0xd0 [ 95.411264][ T5020] dump_stack+0x15/0x1b [ 95.411365][ T5020] should_fail_ex+0x263/0x280 [ 95.411398][ T5020] should_fail_alloc_page+0xf2/0x100 [ 95.411520][ T5020] __alloc_frozen_pages_noprof+0x108/0x360 [ 95.411567][ T5020] alloc_pages_mpol+0xb3/0x260 [ 95.411599][ T5020] alloc_pages_noprof+0x8f/0x140 [ 95.411694][ T5020] __pud_alloc+0x47/0x460 [ 95.411734][ T5020] handle_mm_fault+0x1d44/0x3020 [ 95.411813][ T5020] ? mt_find+0x291/0x3d0 [ 95.411849][ T5020] ? lock_mm_and_find_vma+0x8b/0x440 [ 95.411884][ T5020] do_user_addr_fault+0x3fd/0x1050 [ 95.411940][ T5020] exc_page_fault+0x62/0xa0 [ 95.411983][ T5020] asm_exc_page_fault+0x26/0x30 [ 95.412009][ T5020] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 95.412117][ T5020] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 1a 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 95.412136][ T5020] RSP: 0018:ffffc9011013bdf0 EFLAGS: 00050202 [ 95.412159][ T5020] RAX: ffff888101c1cdc8 RBX: 000000000000000c RCX: 000000000000000c [ 95.412176][ T5020] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc9011013be18 [ 95.412193][ T5020] RBP: 000000000000000c R08: 000000000000035a R09: 0000000000000000 [ 95.412208][ T5020] R10: 0001c9011013be18 R11: 0001c9011013be23 R12: 0000200000000000 [ 95.412303][ T5020] R13: 000000000000000c R14: ffffc9011013be18 R15: 0000200000000000 [ 95.412404][ T5020] _copy_from_user+0x6f/0xb0 [ 95.412433][ T5020] __sys_bind+0x106/0x290 [ 95.412463][ T5020] __x64_sys_bind+0x3f/0x50 [ 95.412485][ T5020] x64_sys_call+0x2b30/0x3020 [ 95.412533][ T5020] do_syscall_64+0x12c/0x3b0 [ 95.412562][ T5020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.412590][ T5020] RIP: 0033:0x7fe26906c819 [ 95.412606][ T5020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.412623][ T5020] RSP: 002b:00007fe267ac7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 95.412654][ T5020] RAX: ffffffffffffffda RBX: 00007fe2692e5fa0 RCX: 00007fe26906c819 [ 95.412672][ T5020] RDX: 000000000000000c RSI: 0000200000000000 RDI: 0000000000000003 [ 95.412686][ T5020] RBP: 00007fe267ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 95.412707][ T5020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.412723][ T5020] R13: 00007fe2692e6038 R14: 00007fe2692e5fa0 R15: 00007ffe80f0a848 [ 95.412746][ T5020] [ 95.733141][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.893225][ T5027] lo speed is unknown, defaulting to 1000 [ 97.298096][ T5048] sctp: [Deprecated]: syz.4.484 (pid 5048) Use of int in maxseg socket option. [ 97.298096][ T5048] Use struct sctp_assoc_value instead [ 97.317849][ T5048] netlink: 28 bytes leftover after parsing attributes in process `syz.4.484'. [ 97.328383][ T5049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 97.348970][ T5049] loop1: detected capacity change from 0 to 128 [ 97.361725][ T5048] netlink: 'syz.4.484': attribute type 3 has an invalid length. [ 97.400333][ T5049] 9p: Bad value for 'rfdno' [ 97.420491][ T5055] syzkaller0: entered promiscuous mode [ 97.429051][ T5055] syzkaller0: entered allmulticast mode [ 97.440154][ T5049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.482'. [ 97.488707][ T5057] syzkaller0: entered promiscuous mode [ 97.496973][ T5057] syzkaller0: entered allmulticast mode [ 98.136156][ T5118] vlan2: entered allmulticast mode [ 98.166988][ T5118] macvlan1: entered allmulticast mode [ 98.186289][ T5120] FAULT_INJECTION: forcing a failure. [ 98.186289][ T5120] name failslab, interval 1, probability 0, space 0, times 0 [ 98.212447][ T5118] veth1_vlan: entered allmulticast mode [ 98.256857][ T5120] CPU: 1 UID: 0 PID: 5120 Comm: syz.1.511 Tainted: G W syzkaller #0 PREEMPT(full) [ 98.256883][ T5120] Tainted: [W]=WARN [ 98.256891][ T5120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 98.256903][ T5120] Call Trace: [ 98.256910][ T5120] [ 98.256917][ T5120] __dump_stack+0x1d/0x30 [ 98.257008][ T5120] dump_stack_lvl+0x95/0xd0 [ 98.257035][ T5120] dump_stack+0x15/0x1b [ 98.257054][ T5120] should_fail_ex+0x263/0x280 [ 98.257084][ T5120] should_failslab+0x8c/0xb0 [ 98.257167][ T5120] __kmalloc_cache_node_noprof+0x6b/0x480 [ 98.257198][ T5120] ? __get_vm_area_node+0x106/0x1d0 [ 98.257221][ T5120] __get_vm_area_node+0x106/0x1d0 [ 98.257302][ T5120] __vmalloc_node_range_noprof+0x291/0x12b0 [ 98.257401][ T5120] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 98.257458][ T5120] ? selinux_file_open+0x2e6/0x330 [ 98.257514][ T5120] ? __rcu_read_unlock+0x4e/0x70 [ 98.257533][ T5120] ? avc_has_perm_noaudit+0xab/0x130 [ 98.257570][ T5120] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 98.257592][ T5120] __vmalloc_noprof+0xa4/0xf0 [ 98.257637][ T5120] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 98.257655][ T5120] bpf_prog_alloc_no_stats+0x47/0x390 [ 98.257691][ T5120] ? bpf_prog_alloc+0x2a/0x150 [ 98.257740][ T5120] bpf_prog_alloc+0x3c/0x150 [ 98.257774][ T5120] bpf_prog_load+0x506/0x1140 [ 98.257853][ T5120] ? security_bpf+0x2b/0x90 [ 98.257879][ T5120] __sys_bpf+0x505/0x7e0 [ 98.257927][ T5120] __x64_sys_bpf+0x41/0x50 [ 98.257944][ T5120] x64_sys_call+0x10cb/0x3020 [ 98.257973][ T5120] do_syscall_64+0x12c/0x3b0 [ 98.258002][ T5120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.258026][ T5120] RIP: 0033:0x7f55d339c819 [ 98.258042][ T5120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.258057][ T5120] RSP: 002b:00007f55d1def028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.258096][ T5120] RAX: ffffffffffffffda RBX: 00007f55d3615fa0 RCX: 00007f55d339c819 [ 98.258112][ T5120] RDX: 0000000000000023 RSI: 000020000000e000 RDI: 0000000000000005 [ 98.258207][ T5120] RBP: 00007f55d1def090 R08: 0000000000000000 R09: 0000000000000000 [ 98.258222][ T5120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.258252][ T5120] R13: 00007f55d3616038 R14: 00007f55d3615fa0 R15: 00007ffcafd79a08 [ 98.258271][ T5120] [ 98.262920][ T5120] syz.1.511: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 98.603105][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 98.603125][ T28] audit: type=1400 audit(1776183783.980:562): avc: denied { accept } for pid=5122 comm="syz.0.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.954837][ T5120] ,cpuset=/,mems_allowed=0 [ 98.964922][ T5120] CPU: 0 UID: 0 PID: 5120 Comm: syz.1.511 Tainted: G W syzkaller #0 PREEMPT(full) [ 98.965030][ T5120] Tainted: [W]=WARN [ 98.965038][ T5120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 98.965052][ T5120] Call Trace: [ 98.965059][ T5120] [ 98.965066][ T5120] __dump_stack+0x1d/0x30 [ 98.965104][ T5120] dump_stack_lvl+0x95/0xd0 [ 98.965131][ T5120] dump_stack+0x15/0x1b [ 98.965156][ T5120] warn_alloc+0x145/0x1c0 [ 98.965312][ T5120] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 98.965351][ T5120] ? selinux_file_open+0x2e6/0x330 [ 98.965392][ T5120] ? __rcu_read_unlock+0x4e/0x70 [ 98.965448][ T5120] ? avc_has_perm_noaudit+0xab/0x130 [ 98.965593][ T5120] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 98.965620][ T5120] __vmalloc_noprof+0xa4/0xf0 [ 98.965671][ T5120] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 98.965698][ T5120] bpf_prog_alloc_no_stats+0x47/0x390 [ 98.965720][ T5120] ? bpf_prog_alloc+0x2a/0x150 [ 98.965745][ T5120] bpf_prog_alloc+0x3c/0x150 [ 98.965826][ T5120] bpf_prog_load+0x506/0x1140 [ 98.965864][ T5120] ? security_bpf+0x2b/0x90 [ 98.965896][ T5120] __sys_bpf+0x505/0x7e0 [ 98.965930][ T5120] __x64_sys_bpf+0x41/0x50 [ 98.965998][ T5120] x64_sys_call+0x10cb/0x3020 [ 98.966030][ T5120] do_syscall_64+0x12c/0x3b0 [ 98.966058][ T5120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.966134][ T5120] RIP: 0033:0x7f55d339c819 [ 98.966151][ T5120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.966173][ T5120] RSP: 002b:00007f55d1def028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.966260][ T5120] RAX: ffffffffffffffda RBX: 00007f55d3615fa0 RCX: 00007f55d339c819 [ 98.966278][ T5120] RDX: 0000000000000023 RSI: 000020000000e000 RDI: 0000000000000005 [ 98.966293][ T5120] RBP: 00007f55d1def090 R08: 0000000000000000 R09: 0000000000000000 [ 98.966316][ T5120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.966331][ T5120] R13: 00007f55d3616038 R14: 00007f55d3615fa0 R15: 00007ffcafd79a08 [ 98.966379][ T5120] [ 98.966416][ T5120] Mem-Info: [ 99.599096][ T5120] active_anon:16231 inactive_anon:3366 isolated_anon:0 [ 99.599096][ T5120] active_file:17803 inactive_file:2911 isolated_file:0 [ 99.599096][ T5120] unevictable:0 dirty:427 writeback:0 [ 99.599096][ T5120] slab_reclaimable:3390 slab_unreclaimable:17535 [ 99.599096][ T5120] mapped:32243 shmem:10874 pagetables:3189 [ 99.599096][ T5120] sec_pagetables:0 bounce:0 [ 99.599096][ T5120] kernel_misc_reclaimable:0 [ 99.599096][ T5120] free:1798373 free_pcp:8247 free_cma:0 [ 99.690714][ T5120] Node 0 active_anon:52164kB inactive_anon:10100kB active_file:71212kB inactive_file:11644kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117604kB dirty:1708kB writeback:0kB shmem:32128kB kernel_stack:3424kB pagetables:13104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 99.731511][ T5120] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 99.804829][ T5120] lowmem_reserve[]: 0 2879 7857 7857 [ 99.814946][ T5120] Node 0 DMA32 free:2947032kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948096kB mlocked:0kB bounce:0kB free_pcp:1064kB local_pcp:104kB free_cma:0kB [ 99.850908][ T5141] syzkaller0: entered promiscuous mode [ 99.866554][ T5141] syzkaller0: entered allmulticast mode [ 99.923135][ T5120] lowmem_reserve[]: 0 0 4978 4978 [ 99.923190][ T5120] Node 0 Normal free:4243268kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46596kB inactive_anon:16244kB active_file:71184kB inactive_file:11672kB unevictable:0kB writepending:896kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:35260kB local_pcp:8916kB free_cma:0kB [ 99.948540][ T28] audit: type=1400 audit(1776183785.370:563): avc: denied { connect } for pid=5144 comm="syz.0.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 100.049188][ T5155] netlink: 16 bytes leftover after parsing attributes in process `syz.4.521'. [ 100.049709][ T5120] lowmem_reserve[]: 0 0 0 0 [ 100.071951][ T5120] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 100.088280][ T5155] loop4: detected capacity change from 0 to 512 [ 100.108658][ T5155] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 100.115009][ T5120] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 6*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 4*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2947032kB [ 100.159598][ T5120] Node 0 Normal: 1688*4kB (UME) 842*8kB (UME) 396*16kB (UME) 326*32kB (UME) 286*64kB (UME) 214*128kB (UME) 210*256kB (UME) 178*512kB (UME) 174*1024kB (UME) 107*2048kB (UM) 886*4096kB (UM) = 4247216kB [ 100.179638][ T5155] EXT4-fs (loop4): 1 truncate cleaned up [ 100.180354][ T5120] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 100.194680][ T5120] 26566 total pagecache pages [ 100.195933][ T5155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.200747][ T5120] 29 pages in swap cache [ 100.216175][ T5120] Free swap = 124640kB [ 100.220348][ T5120] Total swap = 124996kB [ 100.224514][ T5120] 2097051 pages RAM [ 100.228468][ T5120] 0 pages HighMem/MovableOnly [ 100.233195][ T5120] 81627 pages reserved [ 100.408658][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.535168][ T5185] tmpfs: Bad value for 'mpol' [ 100.590820][ T5190] netlink: 'syz.1.532': attribute type 12 has an invalid length. [ 100.618027][ T5192] loop4: detected capacity change from 0 to 512 [ 100.624788][ T5190] netlink: 'syz.1.532': attribute type 29 has an invalid length. [ 100.651145][ T5192] EXT4-fs (loop4): 1 truncate cleaned up [ 100.660420][ T5190] netlink: 148 bytes leftover after parsing attributes in process `syz.1.532'. [ 100.686956][ T5192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.786161][ T5195] bond2: option lacp_rate: invalid value (112) [ 100.795246][ T5192] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 100.838022][ T5192] audit: out of memory in audit_log_start [ 100.853533][ T5195] bond2 (unregistering): Released all slaves [ 100.947838][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.155224][ T28] audit: type=1400 audit(1776183786.580:564): avc: denied { setcheckreqprot } for pid=5197 comm="syz.1.536" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 101.236553][ T28] audit: type=1400 audit(1776183786.650:565): avc: denied { listen } for pid=5199 comm="syz.1.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.314809][ T28] audit: type=1400 audit(1776183786.650:566): avc: denied { accept } for pid=5199 comm="syz.1.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.347921][ T5202] loop1: detected capacity change from 0 to 512 [ 101.367144][ T5202] EXT4-fs: Ignoring removed nobh option [ 101.397040][ T5202] EXT4-fs (loop1): 1 orphan inode deleted [ 101.403108][ T5202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.415655][ T28] audit: type=1400 audit(1776183786.710:567): avc: denied { nlmsg_read } for pid=5199 comm="syz.1.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.505076][ T5207] loop3: detected capacity change from 0 to 256 [ 101.549732][ T5207] FAT-fs (loop3): codepage cp861 not found [ 101.655720][ T28] audit: type=1400 audit(1776183787.080:568): avc: denied { setopt } for pid=5211 comm="syz.3.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.836502][ T5217] loop3: detected capacity change from 0 to 512 [ 101.877775][ T5217] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #16: comm syz.3.541: corrupted inode contents [ 101.926448][ T5217] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 101.926644][ T5217] EXT4-fs error (device loop3): ext4_dirty_inode:6497: inode #16: comm syz.3.541: mark_inode_dirty error [ 101.935855][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 101.935868][ C1] EXT4-fs (loop3): initial error at time 1776183787: ext4_do_update_inode:5604: inode 16 [ 101.935912][ C1] EXT4-fs (loop3): last error at time 1776183787: ext4_do_update_inode:5604: inode 16 [ 102.063369][ T5225] loop4: detected capacity change from 0 to 2048 [ 102.074916][ T5217] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 102.075263][ T5217] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #16: comm syz.3.541: corrupted inode contents [ 102.118755][ T5217] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 102.118924][ T5217] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.541: mark_inode_dirty error [ 102.145795][ T5225] GPT:first_usable_lbas don't match. [ 102.151152][ T5225] GPT:34 != 290 [ 102.158155][ T5225] GPT: Use GNU Parted to correct GPT errors. [ 102.169852][ T5225] loop4: p1 p2 p3 [ 102.188638][ T5217] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 102.188877][ T5217] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #16: comm syz.3.541: corrupted inode contents [ 102.254318][ T5217] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 102.254507][ T5217] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 102.313924][ T5217] loop3: lost filesystem error report for type 5 error -117 [ 102.314171][ T5217] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #16: comm syz.3.541: corrupted inode contents [ 102.373871][ T5217] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 102.374094][ T5217] EXT4-fs error (device loop3): ext4_truncate:4604: inode #16: comm syz.3.541: mark_inode_dirty error [ 102.439178][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 102.450545][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 102.455095][ T5217] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 102.461751][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 102.490306][ T5217] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 102.519686][ T5217] loop3: lost filesystem error report for type 5 error -117 [ 102.521535][ T5217] EXT4-fs (loop3): 1 truncate cleaned up [ 102.535253][ T49] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 102.550031][ T5233] netlink: 'syz.2.546': attribute type 12 has an invalid length. [ 102.557920][ T5233] netlink: 'syz.2.546': attribute type 29 has an invalid length. [ 102.564792][ T49] EXT4-fs error (device loop3): ext4_release_dquot:7064: comm kworker/u8:3: Failed to release dquot type 1 [ 102.566291][ T5233] netlink: 148 bytes leftover after parsing attributes in process `syz.2.546'. [ 102.586303][ T5217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.590672][ T5217] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.651241][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.717578][ T5237] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=5237 comm=syz.1.547 [ 102.755880][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.882599][ T5243] loop1: detected capacity change from 0 to 1024 [ 102.935965][ T5243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.426480][ T5253] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.551'. [ 103.478497][ T5253] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.551'. [ 103.537019][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.709279][ T5263] loop1: detected capacity change from 0 to 512 [ 103.883567][ T5263] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 103.935032][ T5263] EXT4-fs (loop1): mount failed [ 105.102461][ T5278] loop1: detected capacity change from 0 to 512 [ 105.124943][ T35] IPVS: starting estimator thread 0... [ 105.142479][ T5278] EXT4-fs (loop1): 1 truncate cleaned up [ 105.154059][ T5278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.234790][ T5281] IPVS: using max 2640 ests per chain, 132000 per kthread [ 105.618719][ T5287] loop2: detected capacity change from 0 to 512 [ 105.628139][ T5287] EXT4-fs (loop2): orphan cleanup on readonly fs [ 105.637448][ T5287] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 105.647778][ T5287] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 105.657719][ T5287] EXT4-fs error (device loop2): ext4_acquire_dquot:7028: comm syz.2.562: Failed to acquire dquot type 1 [ 105.669058][ T5287] loop2: lost filesystem error report for type 5 error -117 [ 105.674739][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 105.687781][ T5287] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 105.688523][ C0] EXT4-fs (loop2): last error at time 1776183791: ext4_acquire_dquot:7028 [ 105.717104][ T5287] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 105.727203][ T5287] EXT4-fs error (device loop2): ext4_acquire_dquot:7028: comm syz.2.562: Failed to acquire dquot type 1 [ 105.738578][ T5287] loop2: lost filesystem error report for type 5 error -117 [ 105.738921][ T5287] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.562: bg 0: block 248: padding at end of block bitmap is not set [ 105.762175][ T5287] loop2: lost filesystem error report for type 5 error -117 [ 105.762318][ T5287] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 105.780532][ T5287] loop2: lost filesystem error report for type 5 error -117 [ 105.781593][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.787046][ T5287] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 105.832297][ T5298] loop1: detected capacity change from 0 to 512 [ 105.841890][ T5287] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 105.852025][ T5287] EXT4-fs error (device loop2): ext4_acquire_dquot:7028: comm syz.2.562: Failed to acquire dquot type 1 [ 105.863408][ T5287] loop2: lost filesystem error report for type 5 error -117 [ 105.876481][ T5287] EXT4-fs (loop2): 1 orphan inode deleted [ 105.916842][ T5287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.940800][ T5287] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 105.955524][ T5287] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 105.983495][ T5303] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 105.998882][ T5287] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 106.011470][ T5287] audit: out of memory in audit_log_start [ 106.024511][ T5287] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 106.050224][ T5303] loop4: detected capacity change from 0 to 256 [ 106.069430][ T5303] FAT-fs (loop4): Directory bread(block 64) failed [ 106.076141][ T5303] FAT-fs (loop4): Directory bread(block 65) failed [ 106.092886][ T5303] FAT-fs (loop4): Directory bread(block 66) failed [ 106.104299][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.109786][ T5303] FAT-fs (loop4): Directory bread(block 67) failed [ 106.136528][ T5303] FAT-fs (loop4): Directory bread(block 68) failed [ 106.153480][ T5303] FAT-fs (loop4): Directory bread(block 69) failed [ 106.164753][ T5303] FAT-fs (loop4): Directory bread(block 70) failed [ 106.171343][ T5303] FAT-fs (loop4): Directory bread(block 71) failed [ 106.198201][ T5303] FAT-fs (loop4): Directory bread(block 72) failed [ 106.213440][ T5303] FAT-fs (loop4): Directory bread(block 73) failed [ 106.264483][ T28] audit: type=1400 audit(1776183791.680:569): avc: denied { setopt } for pid=5299 comm="syz.4.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.385266][ T5306] netlink: 'syz.3.568': attribute type 4 has an invalid length. [ 106.409851][ T5306] netlink: 'syz.3.568': attribute type 3 has an invalid length. [ 106.791326][ T28] audit: type=1400 audit(1776183792.210:570): avc: denied { mounton } for pid=5321 comm="syz.4.573" path="/103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.835088][ T5322] 9pnet_virtio: no channels available for device syz [ 106.855036][ T5322] SELinux: Context .]& is not valid (left unmapped). [ 107.024821][ T5329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 107.036228][ T5329] loop2: detected capacity change from 0 to 512 [ 107.059108][ T5329] msdos: Bad value for 'errors' [ 107.222780][ T5336] netlink: 56 bytes leftover after parsing attributes in process `syz.2.577'. [ 107.259225][ T5337] netlink: 'syz.4.576': attribute type 12 has an invalid length. [ 107.267416][ T5337] netlink: 'syz.4.576': attribute type 29 has an invalid length. [ 107.275264][ T5337] netlink: 148 bytes leftover after parsing attributes in process `syz.4.576'. [ 107.330624][ T5337] bond1: option lacp_rate: invalid value (112) [ 107.373467][ T5337] bond1 (unregistering): Released all slaves [ 107.446320][ T5342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.473439][ T5341] lo speed is unknown, defaulting to 1000 [ 107.486040][ T5342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.739251][ T5306] syz.3.568 (5306) used greatest stack depth: 8568 bytes left [ 107.945447][ T42] Bluetooth: hci0: sending frame failed (-49) [ 107.952044][ T3703] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 108.113615][ T5369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.587'. [ 108.154114][ T5369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.587'. [ 108.282014][ T5369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.587'. [ 108.302975][ T5369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.587'. [ 108.314763][ T5369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.587'. [ 108.350394][ T5371] loop3: detected capacity change from 0 to 128 [ 108.359369][ T5375] siw: device registration error -23 [ 108.375545][ T5369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.587'. [ 108.532758][ T5369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.587'. [ 108.867351][ T5369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.587'. [ 108.880615][ T5369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.587'. [ 108.917729][ T5369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.587'. [ 108.968072][ T5369] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.975494][ T5369] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.126983][ T5369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.157344][ T5369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.267141][ T5379] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 109.276531][ T5379] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 109.341992][ T12] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.356697][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.388198][ T12] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.446657][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.471932][ T12] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.480943][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.541540][ T55] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.010943][ T55] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.030540][ T5375] loop2: detected capacity change from 0 to 8192 [ 110.050233][ T5399] netlink: 'syz.0.595': attribute type 12 has an invalid length. [ 110.072609][ T5399] netlink: 'syz.0.595': attribute type 29 has an invalid length. [ 110.118732][ T5402] bond2: option lacp_rate: invalid value (112) [ 110.135843][ T5402] bond2 (unregistering): Released all slaves [ 110.164220][ T5403] lo speed is unknown, defaulting to 1000 [ 110.332546][ T5424] netlink: 'syz.1.602': attribute type 1 has an invalid length. [ 110.874710][ T5430] ================================================================== [ 110.882894][ T5430] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 110.890265][ T5430] [ 110.892608][ T5430] read-write to 0xffffc90000e2fe28 of 8 bytes by task 5435 on cpu 1: [ 110.900702][ T5430] shmem_writeout+0x2f1/0x920 [ 110.905406][ T5430] shrink_folio_list+0x1f1f/0x2820 [ 110.910543][ T5430] evict_folios+0x2a60/0x35c0 [ 110.915343][ T5430] try_to_shrink_lruvec+0x81b/0xbf0 [ 110.920574][ T5430] shrink_lruvec+0x255/0x1c60 [ 110.925310][ T5430] shrink_node+0x67a/0x2130 [ 110.929853][ T5430] do_try_to_free_pages+0x408/0xc80 [ 110.935077][ T5430] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 110.940998][ T5430] try_charge_memcg+0x37e/0xa10 [ 110.945876][ T5430] obj_cgroup_charge_pages+0x23/0xc0 [ 110.951245][ T5430] __memcg_kmem_charge_page+0x9e/0x170 [ 110.956730][ T5430] __alloc_frozen_pages_noprof+0x18a/0x360 [ 110.962577][ T5430] alloc_pages_mpol+0xb3/0x260 [ 110.967373][ T5430] alloc_pages_noprof+0x8f/0x140 [ 110.972328][ T5430] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 110.978255][ T5430] __kvmalloc_node_noprof+0x3d4/0x650 [ 110.983649][ T5430] futex_hash_allocate+0x190/0x9d0 [ 110.988808][ T5430] futex_hash_prctl+0xd8/0xf0 [ 110.993510][ T5430] __se_sys_prctl+0x4f4/0x1400 [ 110.998307][ T5430] __x64_sys_prctl+0x67/0x80 [ 111.002925][ T5430] x64_sys_call+0x2533/0x3020 [ 111.007627][ T5430] do_syscall_64+0x12c/0x3b0 [ 111.012237][ T5430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.018162][ T5430] [ 111.020500][ T5430] read to 0xffffc90000e2fe28 of 8 bytes by task 5430 on cpu 0: [ 111.028072][ T5430] shmem_fallocate+0x5c0/0x920 [ 111.032887][ T5430] vfs_fallocate+0x3b6/0x450 [ 111.037494][ T5430] __x64_sys_fallocate+0x7a/0xd0 [ 111.042448][ T5430] x64_sys_call+0x298e/0x3020 [ 111.047154][ T5430] do_syscall_64+0x12c/0x3b0 [ 111.051767][ T5430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.057680][ T5430] [ 111.060031][ T5430] value changed: 0x00000000000003b9 -> 0x00000000000003c6 [ 111.067148][ T5430] [ 111.069486][ T5430] Reported by Kernel Concurrency Sanitizer on: [ 111.075655][ T5430] CPU: 0 UID: 0 PID: 5430 Comm: syz.1.606 Tainted: G W syzkaller #0 PREEMPT(full) [ 111.086436][ T5430] Tainted: [W]=WARN [ 111.090248][ T5430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 111.100325][ T5430] ==================================================================