last executing test programs: 4.094359937s ago: executing program 0 (id=432): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000002030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r4, 0x20, &(0x7f0000000080)={&(0x7f0000001680)=""/4098, 0x1002, 0x0, &(0x7f0000000000)=""/65, 0x41}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0000}]}) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESOCT=r5, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r6 = syz_io_uring_setup(0x30da, &(0x7f0000000080)={0x0, 0x6968, 0x10, 0x2, 0x1a1}, &(0x7f00000001c0), &(0x7f0000000140), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000001540)={0x3, 0x0, 0x0, &(0x7f0000001480)=[{0x0}, {&(0x7f0000001180)=""/237, 0xed}, {&(0x7f0000001280)=""/39, 0x27}], &(0x7f0000001500)=[0x2, 0x4, 0x3]}, 0x20) r7 = eventfd2(0x10, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f0000000000)=r7, 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000001cc0)={0x2, 0x0, &(0x7f0000001c40)=[{0x0}], 0x0, 0x1}, 0x20) socket$tipc(0x1e, 0x5, 0x0) fchdir(r0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r9, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r9, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) write$binfmt_script(r8, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x6, 0x0, 0x0, 0x1e00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x9, 0x7, 0x8000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r2], &(0x7f0000000800)}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 3.427855375s ago: executing program 0 (id=442): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x8000000000000000, 0x5}, 0x4130, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfff4}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, r0, 0x0) syz_clone(0x5000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nfsfs\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000000040)={'macsec0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) getdents(r1, &(0x7f0000000000)=""/53, 0x35) 3.372524446s ago: executing program 0 (id=444): socket$kcm(0x11, 0x200000000000002, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) socket(0xa, 0x3, 0xff) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000018008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0000500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/210, 0xd2}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)=0x12800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="39000000140081ae10003c000520018311001f9f660fcf060800000012f691f3bd3508abca1be6eeb89c44eb33730800000000000000e92155", 0x39}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000100)="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", 0xfef}, {0x0}], 0x2, 0x0, 0x0, 0x7400}, 0x45000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001a80)=ANY=[@ANYBLOB="38010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fe88000000000000000000000000000100000000000000000000000000000000020000000000000000000000000000000000031000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000024000900b4000000000000000100000000000080b400000000000000050000000000000014000e00fe8000000000000000080000000000bb10000a0026bd70002bbd700002000000"], 0x138}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8010) socket$pppl2tp(0x18, 0x1, 0x1) 3.323847428s ago: executing program 0 (id=446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2000000002) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000000000000000000000000000061194c0000040000950000000000000047b7fbc828a3574ded64ddae01a2808503666c91d321e2175fcc1ffb2cde599f3d5b08cbb144dfb2d1359acd8ce8c4bf8ef06a4fa6754d63bffe40d843c5fd4a8618457f4bf97fe6ba30876d695e05e331fdacc738061c2222192d0d7c04be"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x80e1280, &(0x7f0000000300)="9e920a23254f1e8e10bc2525225d1be304e664460c7294865830d05532a786006f797def105426ddfa6719122b851c3761852017b5a5f6cc3f976f82bb622cef3f345b41c0060418131f747a52f3e63c96acab52ec19", 0x56, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) write(r2, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) 2.726817354s ago: executing program 3 (id=453): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000800000000000000080000008111ac0000000000950000000000000081ad1ae60e728ebcd9f1f4653786ba10d8f9398c9310a46fef69c424e84b28bfc438a04012e7f444c43cf9337587c9fe55ea2535b44f6e6ff866880e0cda3376b81a10240fae53449ab37271a1e2ea25fc71ba68"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0), 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a31000000000900010073797a3000000000090003"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xec5d, 0x1c881, 0x0, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad"], 0x0, 0x8}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348) io_uring_enter(r4, 0xcbff, 0x1000002, 0x37, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1830000075000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000003000000850000000600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020692500000000002020207b1af8ff00000000bfe79c000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2c}, 0x94) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_NEXT_CMD_LEN(r6, 0x2283, &(0x7f0000000100)=0x3c) r7 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r7, 0x1) 2.623389147s ago: executing program 4 (id=456): socket$kcm(0x11, 0x200000000000002, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) socket(0xa, 0x3, 0xff) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000018008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0000500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/210, 0xd2}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)=0x12800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="39000000140081ae10003c000520018311001f9f660fcf060800000012f691f3bd3508abca1be6eeb89c44eb33730800000000000000e92155", 0x39}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000100)="e601a43ca89f3137837acf4d847b762f4d33c658f641ba9756461e5d8bfc8ef2fbc7c28d53bf7dfeb6cf9066ce4e63ea1d49698b5b652fd0670c30525f60cdaf3f48c4de02ff8c2db92851a1b6471a45a4a873708dfb783b927854bf3bf5ebe26973e7fd90b7e3248c02bb1d4aec0e6821b39072dbb1ebb25148d2cab301e5e90fcdb46f9f3e6c81f8c2a5b75fa72844825ced88b76d347e98c7803c056793c05a1eaceafe76a223284b10171a66dc46419c8bd82e8d076b1f44851e1c89199dc26bd7c88e5fe4e163e1a4489bf43f613679d1144aa5c92619c3ab49eeb135fd728ed1a60fa4b7ed335e44cdbd503f1ae92fb78e0f5e09d8c0c33c46c51d59ec323c7b29fdd6e15aaa97c5c4c1fce971c7d5b1ff053008284693d30498cfceb025078e5fc0d339b5b9bac223c44ea6ac38db5c34cbc0325a92ce0dc986dbb345714a93c85d26104fbe380c24471bdc4ff0174bd5d44f8160e96dfda5ec0408b93b4f5eb15b1b90c75015bc9240338a8a85f03382662e272393c87193ed94cbd1b7a1d2ac7981a3abf58345f492587707d199460ee41b69c129a57d1475d424d02c0b27d02ff033ab306ab45100adcc7256bf586c24f8c758b6f939da642098410dbe15dfe769c081653a325961de700861b1ea571ed4fab6c603644bead1bf54aaef09d1ec613f1b285ca04e1690885c83c48d014123846d93d22191147179553e3725be349225f0965dbd746a308adad793015d788c73acc1ec78ba578f946085cdded23ec37722805dc458e73d5fee7532be17bb65d6e4d9a9d144d58de8c60aef4ad7132e424e6da1e2119903ab51d1d923b727a83b1d1b8e5a6b15a267c3509453f474068705dab9bb8220623456ed02a854f316b2e60e6f72488ece258651477e8642e32cddf3232e3fe1517fe91b212c2e11a9510ab826d6a4545f07b74f9678480e704822ea7b47345c9019c8789f7cb4cca82cc523842aef47eb9036e53dbce824081c535b711783c77289b9f49e31f090d31b12c93805e55a47c780d6152089958a55f2786bbbc3f3131541b09777c03f20dfd8e2a898a5b5a951e37b30af8c78e347acb8a4ea3bf8f1b7bbf2ca0f544c3cfe45351c7cd9fd83cd4d46ae5c90bd5d6ed78e653513af96f1cada56e1287808ea90e62ba6b2091d3bd27d47d9cdbb735309431d778e9514a7d2f5c27e59361c060311a9e8a82ff3efde8d4d02218e0902e6b4e1521b68fe132e99019358247d2ece98aebd5351ef135a5d7b6168282ccb6ca1d0923797357b5e61ae7c4947743ebfac00ecb51a9596f033afe98a5422f80f42c44a1dbf31aff7ce9b6b4c988fd13290e8203439654a5518d651d7cf5d707ddbe0176a22d175152719bf23174b2caf1ccc0504189244415ac64aaa71347e11950e2c973dd24e991a1c2405a5ff4c7f98f680309818e3424cd768a7b172cc104296fa9953821ba7a2d39cd384403bfda5f27e4e5c9032c57907a9f7be0cbe63806775deb76e8c2efe30057a64b81334dbf2b11fe56eea9cb9e328cd8ab72312ec867abd439279be970b491af13fe0e6dc64af8c000e6ae609cdc6728eab7bad02b5c4d22d9caaabfc5e98fb78d4d21c9ba0af2b5d07a491b1dd888d1b921dcefe10a416731468c57ffb864eab868f7889c2ab618f1286b8c6e668ca56661132903f149e9d3060bf26f5008c228fe0522094aceb4b6a40966ebb3758c12b44ed82447eec4e29a5394857c75da59f020743291fd34a0ce755977b606287f55b54c33f36376bb281f745899e2f92653276ee2237fae02addc1b1e15be2c98c344fdd38ef956c864285e3b801e45fbcc0dca094976fbc7545c0e5492763aaf83acada1e879b854dcf257fef62441fba9b05baaa8ca096b6a432fbaf9b3331a468ee698f06bb852c30669476f4ee4697c1fe38ec998bc6a0a77db7c95db0186fccefeaa143b9dda81cd6a6061375ce1e69d81bd9432a08404b409dc738efdda04dda062c87dad21011c2cc845bcf66e94e90210853c28e01a97d6c52f148cc05bdac7f8dd45549384179a8a574b6cc78f51a3576f4f6f0b8985ed3558e011f7bb45d81ee2d5ba89fbc2fa9c819b3b9295371b8eee54e7e85c0dab5a6b976d9efe6764503d520bf00277cec88ae0f4c114a7e4dd282fb828972b2a63c583a9bdffdc14820b21f1a1464420b07f93233a05c92bf5a13d0acd7a813faf8df1aa482d30c0850b06474c18ed80526a4eead556a6e48ebb496c81d8aa27319097f68245f9a513a438220c74ebc153dfc739cd856daba79d29db61e80b2813b18c88b1a1b023a36928b0914fc38af7d43655a0f2ed9ad4d21ab2ebb5f8a63d405447b488321ec4fb536db2826b92b39801c18aa2a04fe19180d548f53a33b8b1b661881db8e7008e4b8711a02b8e7535b0cc97ff119ba1ceda3739c10fb476f1703614726f7d0f94921939b6495bd6c5106d6f2974ffd30198a624d306d0d32553446d7f751815d055963e74a40d63cf565fd69677039f164653246b9ee63545205765e44dabd61701f2be24999a7a6c87ac97b321e56f50bfe895baad2fe425fbb5d788eded63e4662f95111f06bc25585b9a78a17352823fb705b17255365892be309aa2dae7f231f484914cf2b12489be49b9a4ebc883423adfe88ff9d711fc5ffd1273313aa0f3f24f8a4636b822078844cf6bc96d1a54f014fd5e281d6e0ee5d95da08f835e9a7f8fee0df7ac51924fe164e3ecc78ef4cec805a2169c66db1c18099949404d59e3a85f5e71a307a62feda80147a0a93aa581997b9824504737c966fdbbafdd6ca4b9073b7015be4e621cb2041d114235262dedb015cf65c2ea723cc9e7b840bec9a730ffcf16801bc1e94681959d51f935a0d64b792c785c16aba15e7fd0d46ad9d74bf6193d80b1e7e6b797951b25861d7c4411cee36a8e8f57ed8b30c8450b49d458a549a17f518e4b0ea47cdbb8dc5e7ba2cc79725392f74a01dcf1a0b48e2fb97d803ad0275d63d2d87f7ff307ba5a9bafbbb0c844ce47be25de26e6fa84f371140930697a353665c63e78e267abb17cc0c9e5c4b9cc5fb5758ff0c473519108f27db0926c58e44c70323f4accbb1c483a053f8834582485eb0a0780ffb10143a3c705e653a098a175b530e67a28bbdba38772333f8067d1addba4a0d959dbf55514737c6aa5f83aa6f1d29dca80486ab1ad78b069f5f2fa5ec0d91864aff7a8898073add1374d9d228cab89492607bee174b880dcf1a3efa23d8223e8e91ad5cc54c0bedd44e415cd3cf03ebb0ba4aae6f07d1abdb6c66a46349729bd3ebfc3c5aff89403d7fda8dcdd6e4260eb302ceb39786f04c3cf0dc026ba4d214f0ac32fa03038c8a3698dc1156c07e707b29b4853c58ff08ec3481074559704fa788f254a362d5fe155fad00b3d77a6e31aae2e43fd6655201ccf53b3926d588740d28bc7761b2d0566c856e8e273042a67528b57b409352a897eef4b2a317cc14fbd953cc66411f291de3ac6d29ac33a90f9c39dae27d2a39dab24b6efe1da7c684611ea3f944ab7c5274d7738bef5c96ec9538d31e17b508f45eb367521384a003668a959ca52b9e767de4b98581d3377fd4a901cda78fd5f47267bdcf8d32cde570d6327b0270cef5be0e9ee3b5e9e6aa441648910f6151e4b0388ecdd9b6fb4abe657062b691fd3787e6345e96ed36cad83db7f5e56fe5a2a62b495bf012a92711cba40088ac6ad058f65c41c4656ffe11ea8dcb884df5f0aec40e64072c0eefe8161914641e8657adfb59f7b1d1276cc90f43da0bbef49338610d38282f0b7734367e56cc7e37b2b63c09f5b39b702e3af0539d9ae145f78a5589996f133d3e4e2c627db66990d51fe5f4e21ebd75cff6955f50b2259a0c7ac61bddd1fc6abb5030407286d190963d99d99479d9be9390ff7aef9609a7d4ab73e4bac1086d26137041fae3a6f9d0f881a7141ec54824a3ba8218e22773fd271d5cc98192e771bc45076607b019ec4fc675247219ef871de8f9657308ede8d27858ab7853a93cfc8b4e0e3c6ee5fc53ce616a75de3ca66595f1770216c0a3249477bba99567be62df7795095a49b7ca71e3dded508e973f5d53b2d0a3eb64f431189bd05513ccc35df57a9fd68f51c37ec7fa14c277bd5ef0e8c4f0d0842bbbf76ef5cb9dcd63c6c89983178a9881610f463447db31da2accbd6fa2086f14b422e1dc0aa448a3293df3df27d07a2208e0160709eb3cf2c38a856286a29d11dd643e6432c54568239af7354fc885480c2e9e964b03a64c9f8f07a6c4879d85d176c0af1dede6e74f08612cc0ed762c42399b14fd677e95db8eb1d44c8b3ee8c5aa24bee032c022777020c4370b4557a9944609fc2ba183ab96288591418acc38bdc593cc399d50a6c1e23d11ef5b62bf460447070f3f3e74cfa966c3446343afbb2075ef16e2a331fa3297a2a08c3e87dd1af98ee0143c6864ad1f24de4ebc1e88407110ba35ff6d71d856239e98a9739214ce84b60057e30cee05dcf0bb4089524ca1b1100d3523cf529e55ed080c11f05504e20167a6a17ebe7ef3fc2c3fadab6a3647f00243a5cfcd451c0dd9c70a1164a54179a2598eb6087c2d1dc029e617441d3418da2509dd9fe9810cfa4a0d375cf03659310f78667403f3445cbda91a66c6c5577adb831ee5d325fc3953c2da6c734a8e1c20d7a3a5fb0e06e40081ccd30b273ba5ccc13e0c673ddc615dceb98c437c5601b7b7d6c1d2e9d217bf1dc571180566e6f1b4eb09ae5621d8c86612523e6c8acc2d5020b07947b8c407d6a301c550753653aeb6c98d0cbd145bc556cf3e3a373a855db31314be169db35ce3a69b8b7551d1826fcab5d03ecb9e8394adb28aff4253e767d64b5e11876b22cb3d8c212df3fce3311b2a74c1ec0f0eebbcc280edb673ca144754b416902da089abff9a4abfca851913c7d83cb4f7b091895886d58841a0f8819ee80772cdf822ac34fb554666b68431a753bd6e84a8ae1159e0abd53915f1a18fb90637b6427b2c278d04bdf8d812e98c8d8cc6bdcdf04eada2f731a4a8408d88dc9410ee75a4b676179232455dca83cdcc8928ede097d3ddf6642d695646a1920adbee3ec20c1ebf08c1bf2451af0c119a6e1a24eebb5bbc1bacb38581bc92c836f4a7a93f26c1702c53711c36b14d7066bde5074171b8fe2dce0a11e25f8b16184aa5da05ea15b071fb59b2f67d774b20046d4748a3eda2c62df9fc68aaf55bf75b0a035c482879eb2850e814c9a5e83bba7347b22612459c616b68cc8d98de6fd7059cca2f60acd86290e76efdaceaf44154170aba823adfae86282e333838a527f8d37ff1029913bcd4f6b3794ea53c81b1e55f0df131ebfbac2a72a5890d980efdf8d6f450c269eee0f8086790f77dc21249a6987f0e29f4aa5e769790dd88bacc73693726959ea43bd6747586a995b55b1a00d94af8f0baebc0fb6647b1ea8db30f0425b507f5d0893746f630229f0526fb751efd54183ad1388ac6b2ff55f62cc43e55822014958736a4668fb7ca70476a84ab990bff487449bfdbad5c764bbd66d3147ce03ad29bcc50efc7c9f379a77394922d910772b21188b750611d37c38b0cbabbf309ad1faee871594c7dcf237016af869503b856a009c542eca0ffc149eab4ec63bad2b51a1e961aa49c8432caf39a6d9be313e8ee9b82116a0092f4b0fbb1560eb031800998f8e8087670c67b682ca38d99550fbc5e8ac4adb6c4edd3b09d9a135edef8905c8d", 0xfef}, {0x0}], 0x2, 0x0, 0x0, 0x7400}, 0x45000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001a80)=ANY=[@ANYBLOB="38010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fe88000000000000000000000000000100000000000000000000000000000000020000000000000000000000000000000000031000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000024000900b4000000000000000100000000000080b400000000000000050000000000000014000e00fe8000000000000000080000000000bb10000a0026bd70002bbd700002000000"], 0x138}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8010) socket$pppl2tp(0x18, 0x1, 0x1) 2.623005107s ago: executing program 3 (id=457): openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/13, 0xd) pread64(r0, &(0x7f0000002c00)=""/4082, 0xff2, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x12, 0xfffffffffffffffe}}]}}}]}, 0x40}}, 0x0) iopl(0x7) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000004007b00080002000500000006000b0002000000"], 0x24}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2.559358989s ago: executing program 1 (id=458): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.558844519s ago: executing program 4 (id=459): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_pts(0xffffffffffffffff, 0x200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)=' %', 0x2}], 0x1, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0x20048090}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) 2.51252894s ago: executing program 1 (id=461): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000002800319e6e54000002000000010000000000000c02000000000000000200000d00"/66], 0x0, 0x42}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd001000000000400070007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd001000000000400070007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000000)="1b42d4f2ff2641372069fd4d17f4b578628e2efaaa3b1d4f25a34a3590203934bbb6205819441470cedca327ff8b6cbc37ac7785e5f80b518408d37428cc58439adc14a75660fc624ad3fc1de3c814", 0x4f}, {&(0x7f0000000080)="74c6c01aada62c028d2e36725fe58df8712f8fc9", 0x14}, {&(0x7f0000000540)="e81813b8b944a223857b41634af06e467d8da4b69cd0d9f3ccb2a089f8ec7106132d6ba771cc6f2fe4b8419f5e245dc520f9cba04d095182f175864dea84d6df14fb8637a9b22183747beacd8bcce71d011c814b349014e9c9ae57104d6c4af0e1bbf9c162aac51f17b3b08b0da3b3512375dbd5a43ba65e32c130c2b36cfa17e57a2a8d2a5f86c4fb430858e801f2191313d79a3844efccae72ee567ee41c", 0x9f}, {&(0x7f0000000600)="1752744b39dc9824c88ba84089b5fd7936aeb2f1e50e36c96b161cf283ffbf318c96bae649a5638b561cd5a782750985b05eebd3c850bdc996564c6044e87e0371ebc4d83fd5efbac51c9034a761ce991f51b961baf3042bba7489ae5f00dc0d5698272bf06699f0fb44505a63ea9480647375ddb5689a94a9931272e10ba608360f38b98ab06c3e7f77636bd6943e10a6b766", 0x93}, {&(0x7f00000006c0)="c8fc9bd8569ea7b7467e0dda8e0e0fe90612b836dfada219da93c0557c2a1825b83d0cf4bf8afe80401ba7e298197b1c6abc30cf962b9705c8582baabab97bba61832b1986c9ea", 0x47}, {&(0x7f0000000740)="31acb65b3f46174ffab027bd318395e946f85ca0fe4fa9f1efaf245306e5f1af0954a73ebe660734003cb21789d5166e7663a92dd0e56ab5b935ef4e1d74d6ac105294fe9e19d981484f9a54ac407a8b517e938dbe16", 0x56}, {&(0x7f00000007c0)="c51c072c22116612f11ea00584b9285f1288519c664f89", 0x17}, {&(0x7f0000000880)="13f381aae2b9eb5dc754105f1cb1130631c44822fed6f691d9d4024a119d77d15ce6a686f20a3f59c029408ebb80f0df321562df2079a29f64f7eade1a3102687b5366c41495e074c5b6a9905bf46fcc0dabdbbb8ebcb585fccbaa4475b5803a749b075b35a1811f884c8a31ee4b7a9a1f4e9da0f9a156e42ed07c0ee5d244b2720c47ce0b4629bc0831ab3233009c762ae86073a222893de38f0ae59af77fb508dd30bb9e9ce535fe9d467f1c20f0ab7e2372cb94be", 0xb6}, {&(0x7f0000000940)="71080273fa3ee4bc2788155e", 0xc}], 0x9) 2.404171853s ago: executing program 2 (id=462): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)='D', 0x1) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f0000000180)) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000001500)) 2.371190284s ago: executing program 3 (id=463): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)={0x10, 0x453, 0x800, 0x70bd29, 0x25dfdbfa}, 0x10}}, 0x8000) 2.348545475s ago: executing program 4 (id=464): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1ff, 0x80000001}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000540)=ANY=[@ANYBLOB="636865636b3d7374726963742c636865636b3d72656c61786564006d6f64653d3078303030303030303030303030303030312c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303036322c696f636861727365741636bd27bceeb671e4844b3d6d6163677265656b416d61703d61636f726e2c696f636861727365743d69736f383835392d322c73657373696f6e3d3078303030303030303030303030303035382c73686f776173736f632c6d6f64653d3078666666666666666666666666666666652c636865636b3d7374726963742c6673636f6e746578743d73797374656d5f752c7065726d6974"], 0xfa, 0x69f, &(0x7f0000000f00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000480)="ce1e69c5e19e538747a25581567dc479a16855e184ba18c8cd6458506d36c5017f9a1f25f0723a8c69cf6f453927e58b02f18db5e03d96628ee6de33065380ea18fa21162a74a15d664a3d6c40d5eede51267bc7b822d8a429b65b3a41f59d2631423a207fc9a05d98a9fc6e65da7b00221ddfaeb8005fe76b00563b94d651d2495bda071f993af93537700172b9773c99f93a7410201e2340bf334eff5f21a9a8fe945e5533622c7b6870fcefc23a", 0xfffffffffffffddb, 0x7) execve(&(0x7f0000000000)='./file1\x00', &(0x7f0000000740)={[&(0x7f0000000400)='syz1\x00', &(0x7f0000000540)='syz1\x00', &(0x7f0000000580)='@\x00', &(0x7f00000005c0)='hash:ip,port\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)=':^\x00', &(0x7f0000000700)='ext4\x00']}, &(0x7f0000000880)={[&(0x7f0000000780)=']^${}*\x00', &(0x7f00000007c0)='hash:ip,port\x00', &(0x7f0000000800)='*+)|{,^%\x00', &(0x7f0000000840)='\x00']}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c000000020603000000000000000000000000001194fb5015a1e72985716735e93d4d45000300686173683a69702c7000050001ff070000000900020073797a3100000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) 2.284096087s ago: executing program 3 (id=465): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000340)={0x5854, 0x0, 0x0, 0x63}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0xac9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x411b}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_setup(0x43, &(0x7f0000000140)=0x0) r6 = socket$inet(0x2, 0x80000, 0x3) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="890704", 0x3) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000100)='veth1_vlan\x00', 0x10) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0xffff, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="0823fbfaffa92be7", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x40810) io_submit(r5, 0x0, &(0x7f0000000300)) sendmsg$nl_route(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001e008d2af638ea4beaffffff000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x4044) 2.16137718s ago: executing program 4 (id=466): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000300000000050000000200000000000000020000000000000c2000000000002e"], 0x0, 0x40}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000880)="ad4786ab91cbecc8bc2ebcba169e22fe7a533aca2f73eccfc179a5afd73037e530341bee571ab3e1323d3d15f76bf8dd75149b90711e75efa08e415fb0fbd086ea628b35c3ef038e0f6cad1f81", 0x4d) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}, 0xffffffd5) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x92c9, 0x0) syz_clone3(&(0x7f0000000a80)={0x200000, &(0x7f00000000c0), &(0x7f0000000180)=0x0, &(0x7f0000000940), {0x12}, &(0x7f0000000980)=""/67, 0x43, &(0x7f0000000a00)=""/51, &(0x7f0000000a40)=[0x0], 0x1, {r0}}, 0x58) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={r2, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000b00)='journal_dev'}, 0x30) write$cgroup_subtree(r0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3fb4c4e46942352c}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xfffffe57}], 0x1, 0x5405, 0x0, 0x0) 1.720325662s ago: executing program 0 (id=467): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa0040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0xfd, 0x5aec}, {0x6, 0x0, 0x7, 0x1}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x2005}], 0x2, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 1.547677206s ago: executing program 1 (id=468): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000800000000000000080000008111ac0000000000950000000000000081ad1ae60e728ebcd9f1f4653786ba10d8f9398c9310a46fef69c424e84b28bfc438a04012e7f444c43cf9337587c9fe55ea2535b44f6e6ff866880e0cda3376b81a10240fae53449ab37271a1e2ea25fc71ba68"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a31000000000900010073797a3000000000090003"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xec5d, 0x1c881, 0x0, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad"], 0x0, 0x8}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348) io_uring_enter(r4, 0xcbff, 0x1000002, 0x37, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1830000075000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000003000000850000000600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020692500000000002020207b1af8ff00000000bfe79c000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2c}, 0x94) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_NEXT_CMD_LEN(r6, 0x2283, &(0x7f0000000100)=0x3c) r7 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r7, 0x1) 1.539442057s ago: executing program 2 (id=469): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x94a, 0x20520, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x9, 0x3}, 0x102008, 0x1224, 0x0, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x56712eaeff4f5312, &(0x7f0000000080)={0xa, 0x4c22, 0x2, @dev={0xfe, 0x80, '\x00', 0x26}, 0x200}, 0xd) sendmsg$sock(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="9f5856a3366deceacfa8b6c131f67483e8d4e5cc8bc949e9dc9760426f9951f04c6f28de220575352535c4f01ec232fa2af8", 0x32}, {&(0x7f0000000080)="4c8c59e4027cd4850c756f94d5737ca136fa1a7c622855a1036fbdd263107e2a6d62b6c09b62e75012608da7ca0d542283e977b5eadc6a396c39f7a96fd0a6c3873afecd94380ab2d7e49da7c1ae4e4b9e184ac4bd7234e1981c2e0008049eba5fe7f586b2664894939416dc10eeba040088fc620000000025123e43c22460829d35df4500"/144, 0x90}], 0x2, &(0x7f0000000200)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x69d}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x90}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x16, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001418030000120800040043000000a8001600a400014020000500036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x5}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @exit, @exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x48}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0xd6, &(0x7f00000004c0)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0x8, 0x9}, 0x10}, 0x94) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10) 1.331998492s ago: executing program 2 (id=470): socket$kcm(0x11, 0x200000000000002, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) socket(0xa, 0x3, 0xff) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000018008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0000500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/213, 0xd5}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)=0x12800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="39000000140081ae10003c000520018311001f9f660fcf060800000012f691f3bd3508abca1be6eeb89c44eb33730800000000000000e92155", 0x39}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000100)="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", 0xfef}, {0x0}], 0x2, 0x0, 0x0, 0x7400}, 0x45000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001a80)=ANY=[@ANYBLOB="38010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fe88000000000000000000000000000100000000000000000000000000000000020000000000000000000000000000000000031000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000024000900b4000000000000000100000000000080b400000000000000050000000000000014000e00fe8000000000000000080000000000bb10000a0026bd70002bbd700002000000"], 0x138}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8010) socket$pppl2tp(0x18, 0x1, 0x1) 1.309298364s ago: executing program 1 (id=471): r0 = io_uring_setup(0x6e97, &(0x7f0000000040)={0x0, 0x2424, 0x2, 0x5, 0x172}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000001900)="0a703c7c0b8e4a41a671", 0xa}], 0x1) copy_file_range(r2, &(0x7f0000000080)=0x9, r2, 0x0, 0x7, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f00000001c0)={'pim6reg\x00', 0x2, 0xfff}) r3 = syz_open_dev$sg(&(0x7f0000000540), 0xb4, 0x42) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000000)="fd", 0x1) 1.290518664s ago: executing program 2 (id=472): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.236020036s ago: executing program 2 (id=473): openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/13, 0xd) pread64(r0, &(0x7f0000002c00)=""/4082, 0xff2, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x12, 0xfffffffffffffffe}}]}}}]}, 0x40}}, 0x0) iopl(0x7) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000004007b00080002000500000006000b0002000000"], 0x24}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.140184878s ago: executing program 1 (id=474): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) fchown(r0, 0x0, 0x0) 1.139840388s ago: executing program 1 (id=475): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='\a\x00'/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000302000000000000000000001201b0cdb63cad86483f36f932fffffb283360503ad4537129a875e8f62abe1bc4dbd8d7dd94442543b46e49476e99d6f8b086"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000540)={0x808001, 0xfffffff8, 0xfffffff5, 0x9, 0x1, "000108010000000000000000000000010400", 0x240000, 0x9}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f00000d2000/0x2000)=nil, 0x2000, 0x2000001, 0x10, r3, 0x74f6a000) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) connect$packet(r2, &(0x7f0000000000)={0x11, 0x1c, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x3, 0xe, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000000400)={{r7, &(0x7f0000000240)='(@\x00', 0x40000, &(0x7f0000000280)={@_ha_fsid={[0x2ba, 0x4]}, {0x0, 0x0, 0x4, 0x9}}, 0x1, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0xfffffffb}, {[0x80000001, 0xc7fb, 0x27f, 0x1]}, 0x1000, 0x28, &(0x7f00000000c0)=""/40}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 1.08174484s ago: executing program 4 (id=476): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1ff, 0x80000001}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000540)=ANY=[@ANYBLOB="636865636b3d7374726963742c636865636b3d72656c61786564006d6f64653d3078303030303030303030303030303030312c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303036322c696f636861727365741636bd27bceeb671e4844b3d6d6163677265656b416d61703d61636f726e2c696f636861727365743d69736f383835392d322c73657373696f6e3d3078303030303030303030303030303035382c73686f776173736f632c6d6f64653d3078666666666666666666666666666666652c636865636b3d7374726963742c6673636f6e746578743d73797374656d5f752c7065726d6974"], 0xfa, 0x69f, &(0x7f0000000f00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000480)="ce1e69c5e19e538747a25581567dc479a16855e184ba18c8cd6458506d36c5017f9a1f25f0723a8c69cf6f453927e58b02f18db5e03d96628ee6de33065380ea18fa21162a74a15d664a3d6c40d5eede51267bc7b822d8a429b65b3a41f59d2631423a207fc9a05d98a9fc6e65da7b00221ddfaeb8005fe76b00563b94d651d2495bda071f993af93537700172b9773c99f93a7410201e2340bf334eff5f21a9a8fe945e5533622c7b6870fcefc23a", 0xfffffffffffffddb, 0x7) execve(&(0x7f0000000000)='./file1\x00', &(0x7f0000000740)={[&(0x7f0000000400)='syz1\x00', &(0x7f0000000540)='syz1\x00', &(0x7f0000000580)='@\x00', &(0x7f00000005c0)='hash:ip,port\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)=':^\x00', &(0x7f0000000700)='ext4\x00']}, &(0x7f0000000880)={[&(0x7f0000000780)=']^${}*\x00', &(0x7f00000007c0)='hash:ip,port\x00', &(0x7f0000000800)='*+)|{,^%\x00', &(0x7f0000000840)='\x00']}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c000000020603000000000000000000000000001194fb5015a1e72985716735e93d4d45000300686173683a69702c7000050001ff070000000900020073797a3100000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) 1.034660461s ago: executing program 3 (id=477): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f400002000000000000080000000000000000010005000000000044000500ac141426000000000000000000000000000004d53c"], 0xfc}}, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x0, 0xe, 0x5, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000, 0x1, 0x8, 0x790}}) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c2100801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080007"], 0x104}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {r3, r4}}, './file0\x00'}) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000340)) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4008010) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000700)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = getpid() prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x2000000000000018) sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 957.499914ms ago: executing program 2 (id=478): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) acct(&(0x7f0000000240)='./file1\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@updpolicy={0x100, 0x19, 0x1, 0x0, 0x10, {{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x3}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x3d04c9a7, 0x0, 0x7, 0x8, 0x0, 0xfffffffffffffffc}, {0x0, 0x2, 0x0, 0x3}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x2}, @lifetime_val={0x24, 0x9, {0xa7, 0x8, 0x7fffffffffffffff, 0x6}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075b, 0x1ff}}, @etimer_thresh={0x8, 0xc, 0x7ff}]}, 0x100}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet6(0xffffffffffffffff, &(0x7f0000001880)="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", 0x1000, 0xc80, &(0x7f0000002880)={0xa, 0x4e23, 0x3ff, @loopback, 0x3}, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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") ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f00000002c0)='\x00', 0x0, &(0x7f0000000300)={@align=0x6, {0x7bad, 0x6, 0x6, 0x7fffffff}}, 0x7fffffff, &(0x7f0000000340), &(0x7f0000000380)=0x9}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0xa, @void}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) write(r3, &(0x7f0000000100)="240000001a007f0214f9f4070009040f03000000000000000002000008000f40fe00000e", 0x24) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x1) 714.00301ms ago: executing program 0 (id=479): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x1008205, &(0x7f0000000300), 0x81, 0x63e, &(0x7f00000004c0)="$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") (fail_nth: 13) 636.051432ms ago: executing program 3 (id=480): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000}, [@map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}]}, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4e3}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa95aa86dd608a37f200142c"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x3300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 4 (id=481): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x501000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) (async, rerun: 64) mount_setattr(r0, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={0x100001, 0x2, 0x20000, {r0}}, 0x20) (async, rerun: 64) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x1, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10800}, 0x40000) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (rerun: 32) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd4, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0x90, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) (async) r3 = socket$inet(0x2, 0x2, 0x6) fgetxattr(r3, &(0x7f0000000480)=@known='trusted.overlay.nlink\x00', &(0x7f00000004c0)=""/73, 0x49) r4 = accept$inet(r1, &(0x7f0000000540)={0x2, 0x0, @private}, &(0x7f0000000580)=0x10) ioctl$XFS_IOC_SET_RESBLKS(r3, 0xc0105872, &(0x7f00000005c0)={0x2, 0xa0}) (async) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000600)={0x0, 0x8, 0x3, 0xf, 0x2, 0x4, 0x8, 0x7, {0x0, @in={{0x2, 0x4e21, @empty}}, 0x5cea, 0x2, 0x5, 0x9, 0x5}}, &(0x7f00000006c0)=0xb0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)={r5}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000780)={0xa77, 0x7, 0x0, 0x9, 0x0, 0x40, 0x3, 0x7, r6}, &(0x7f00000007c0)=0x20) (async) r7 = perf_event_open(&(0x7f0000000800)={0x4, 0x80, 0x9, 0x5, 0x5, 0x8, 0x0, 0x1, 0x1010, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x8000000000000000, 0x1}, 0x10105, 0x0, 0x9, 0x9, 0x4, 0x7ff, 0x4, 0x0, 0x9, 0x0, 0x7e}, 0xffffffffffffffff, 0x7, r1, 0x1) (async, rerun: 32) getpeername$unix(r0, &(0x7f0000000880), &(0x7f0000000900)=0x6e) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80440}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x58}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4c000}, 0x40000) (async, rerun: 64) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000ac0)={{{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000000bc0)=0xe8) (rerun: 64) sendmsg$nl_xfrm(r1, &(0x7f0000001140)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001100)={&(0x7f0000000c00)=@flushsa={0x4c8, 0x1c, 0x1, 0x70bd26, 0x25dfdbfc, {0x6c}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}, @tmpl={0x184, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x3c}, 0xa, @in=@local, 0x3502, 0x1, 0x1, 0xf, 0x5758, 0x5, 0x27}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x2, @in=@local, 0x3505, 0x0, 0x1, 0xfa, 0x6, 0x0, 0x785}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x13}, 0x4d3, 0x3c}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3504, 0x3, 0x0, 0x7f, 0x4, 0x6, 0x8000}, {{@in6=@loopback, 0x4d5, 0x3c}, 0x2, @in=@multicast2, 0x3507, 0x2, 0x0, 0x5, 0x6, 0xdbf4, 0x49a6}, {{@in6=@loopback, 0x4d4, 0x2b}, 0xa, @in6=@mcast1, 0x0, 0x1, 0x3, 0x2, 0x9, 0x2, 0xfffffff9}, {{@in=@local, 0x4d3, 0xe4}, 0xa, @in6=@local, 0x3507, 0x4, 0x1, 0x9, 0x6, 0x40000000, 0x5}]}, @offload={0xc}, @algo_auth_trunc={0xb5, 0x14, {{'ghash-clmulni\x00'}, 0x348, 0x60, "08ade2f8fb2154f4b3b276af8e24a7537de41d22454ee45fefb150fad8f95076c31f9153b0169f941a6ee19b6d2bfff1ca2a9947ce426d1047b9e859e3fd9c160c1e87218f0326a755c3a5f4276d7cdaaabd971957e1685922f0d85acaffa8caf70848b140aea1689c"}}, @policy={0xac, 0x7, {{@in=@multicast1, @in6=@mcast2, 0x4e24, 0x81, 0x4e24, 0x0, 0x8, 0x80, 0x80, 0x8, 0x0, r9}, {0x4, 0x8, 0x8, 0x7a, 0xce1, 0x8, 0x100, 0x5}, {0x2, 0x8, 0x1, 0xffffffffffffffdb}, 0x1, 0x6e6bb8, 0x1, 0x0, 0x3}}, @replay_thresh={0x8, 0xb, 0x461}, @lifetime_val={0x24, 0x9, {0xfff, 0xfffffffffffffff8, 0xe, 0x7}}, @algo_crypt={0x48, 0x2, {{'ecb-twofish-avx\x00'}}}, @algo_crypt={0x135, 0x2, {{'lrw(camellia)\x00'}, 0x768, "dddb1add112605bd23674974e09ede0bc2ecae341038541609f9eba421de829962927ab136290ce6464f9891b809f1efe7be738d8180d01e239b7841893aa40a30aa949416616fd6e39728e50773c38481c870ec7e23b7d8e2a93fb7ad34ef795cef7e9cc79e655641321be3fbacd5cc691bcd55a32a1d0cfaddbbd0dd5e7b87cdf8e790e16b89d5ca949a37fe76e97e567e048b15c7036a06fdf8910bec46040481bf70c504ba2e9b905d769d2b3bd62a4ffe3732df6c7f128a9ef91078de6679cba7d2617ece2fea40f5f426160cac628e5c522e559cf2d57a0daa6eb6073d5d79855928ea89bf77f1f31806"}}, @mark={0xc, 0x15, {0x35075d, 0x200}}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x84, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x47}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000001}, 0x20008000) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000001300)) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r10, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x48, 0x1402, 0x0, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x48}}, 0x20000) (async, rerun: 32) pwritev2(r4, &(0x7f0000001740)=[{&(0x7f0000001480)="6fa35a1eb8e2718e47111048966e20c8d64e6b5c026f12c078422c85e238611890efb0375bd0e6dd88b6cd0a9c2a2eaeb176d6fff1ea6d12dd3191e74280407a38bbe7017768b90f4b9a513743e5d339a9b174c8bc19523ef706c3add8cac07510cfca9ca2af1d8e817fb76d9b2bdc96043c230f9ee53c312e2d9f677ef357f2dc5bbfc07829efe22d619561dfafce881fc1b50c3c5721a165b427a9ccbff49713f1e4af92de17b5aca3dda6180f956e95d4aaf02fba1cd67e3add7296f49773a335f4403dbae0a17ce1b9309cbbb362067dba8dd7ec811910a47440a7643e6983d1", 0xe2}, {&(0x7f0000001580)="d1b8ca4a0bc1549ddd10a384461c5bf8f06c41d2e391faac1c4be3b0214d0f1de753c1e7afa8d53c6bf53f89ba670413d91b4a6e66ac488eb2afadb990c196f1e9c9a352c2a8d74f5a8bf247ab34072a9840d4d40f71fa08a6e4204552cf61eca3c6dacff29df5aecc89801a14a38b721fe0a6ab6ca7d17a30a14593dfaf27b715482089de0af04d04ac7b1510d68579864d2f3aad984839b762a137da212636612add0a0b7e2fc03ab885585c020856ebfc48aa2b0070046ec4ebe7870ef87be326425da0c96ce87a60d7e38bdbbbea77", 0xd1}, {&(0x7f0000001680)="e54f8f26bf9534ca060d39eb2ecd667a38e205606e039d8e39901135422c71597e45e0312cf3e435a8303ce4e4b8fe414286b5dec072a4396a6028778886cb9c04decce489b2748870bba9dc3f112f82193faf66d0c149a511f287de34c43b699f6dfd0fd3cba09998c3259becf4ca99980164246ad92e33cbc4a07841262af5f058478a795977e6b71a66fc7a760c5fc8d3ebbbfbf3a846bf5734787cdd38bb59a8f9900faef82475335b6de4ae28b8bbb43d3f9af87894fe3bb197c9d5c0", 0xbf}], 0x3, 0x9, 0x800, 0x23daf316990987a) (rerun: 32) ioctl$XFS_IOC_EXCHANGE_RANGE(r10, 0x40285881, &(0x7f0000001780)={r7, 0x0, 0x6, 0x100000000, 0x4, 0x8}) (async, rerun: 32) ioctl$BTRFS_IOC_ENCODED_READ(r7, 0x80809440, &(0x7f0000001a80)={&(0x7f0000001a40)=[{&(0x7f00000017c0)="36a9ef71a7ad287d6b0705a15e7652ebba03569a70ed16ab1e285ffb93199f60f8b861dff84dfa083b252559d3efe0258fffb513a6eab56d9405861eb368eb5375d35786951d19f3078f3d336f7aaaf6dc7af747483261ea63f9168f695f8bd6a3fd43657e9a522f41bfd5411d22d00ab8c235d21d54259b121c05046e0ed9a9c862d45cffe8319571310b7035b744f6249b1cdebd0312135768bc48eff0c2800706", 0xa2}, {&(0x7f0000001880)="93cf741bcc3dc5e7642ee565864e37b38b794635892f1d8f650443f0ef48b20855942c9b606c28820b8db348b3a063e79fce72c9963338e55701c1db5789ac65e76ec6b6d77e42faac91a08d3981d006e4cbd09952b7a6b48bcddd74f71d3a4d4c8307e05aefabfd53119ba6e32405817d33a103b8373f4ff7bf8ca21da48d7592144d0c49056a071248609ab13db93cfa5651f4386ecf84d45fe49454ea9c9ab4e33051ba48e4be7dd5d4cdd5aa3a1270d8046a276ffd18be09d0b671aec24e566c4d19316090c74c65", 0xca}, {&(0x7f0000001980)="9bd19e0fac87726e312fc062030137aca76b7a4e900980ca1a4747f5c4b7693b060dc76010a91df8fca8741383297fd610a44f79acee5268983e612fa02950c84f84b5bd1bada9e007a76555613db83026e7d077b114322953c9b691c928adc91d7c7dccf50d6dc28a6218db52182da22b871b0206caec40a29200b842bdbcce00cf6bbd1ce742930f3a9ca3a522b03b32a5453a4038b4487a706269c90c786c6fb13988fe1a", 0xa6}], 0x3, 0x7, 0x0, 0xb2, 0xff, 0x1000, 0x1, 0xb3}) (async, rerun: 32) stat(&(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r1, 0x400454ce, r11) (async) listxattr(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)=""/58, 0x3a) kernel console output (not intermixed with test programs): =================================== [ 41.505902][ T3664] WARNING: The mand mount option has been deprecated and [ 41.505902][ T3664] and is ignored by this kernel. Remove the mand [ 41.505902][ T3664] option from the mount to silence this warning. [ 41.505902][ T3664] ======================================================= [ 41.520428][ T28] audit: type=1400 audit(1777424609.088:174): avc: denied { read append } for pid=3653 comm="syz.0.50" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.588945][ T3650] team0: Device ipvlan1 failed to register rx_handler [ 41.640030][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.642230][ T28] audit: type=1400 audit(1777424609.328:175): avc: denied { ioctl } for pid=3653 comm="syz.0.50" path="/12/bus/file2" dev="loop0" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.721844][ T28] audit: type=1400 audit(1777424609.368:176): avc: denied { mount } for pid=3663 comm="syz.2.51" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 41.808659][ T28] audit: type=1400 audit(1777424609.568:177): avc: denied { name_bind } for pid=3671 comm="syz.0.53" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 41.884267][ T28] audit: type=1400 audit(1777424609.598:178): avc: denied { connect } for pid=3671 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.970995][ T3678] netlink: 'syz.1.54': attribute type 29 has an invalid length. [ 41.978307][ T28] audit: type=1400 audit(1777424609.598:179): avc: denied { create } for pid=3671 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.041436][ T3683] lo speed is unknown, defaulting to 1000 [ 42.055668][ T28] audit: type=1400 audit(1777424609.598:180): avc: denied { read } for pid=3671 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.070310][ T3678] netlink: 'syz.1.54': attribute type 29 has an invalid length. [ 42.147777][ T3683] lo speed is unknown, defaulting to 1000 [ 42.170775][ T3683] lo speed is unknown, defaulting to 1000 [ 42.366004][ T3690] __nla_validate_parse: 1 callbacks suppressed [ 42.366031][ T3690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'. [ 42.395513][ T3683] infiniband syz0: set active [ 42.400414][ T3369] lo speed is unknown, defaulting to 1000 [ 42.405287][ T3690] openvswitch: netlink: Flow key attr not present in new flow. [ 42.435770][ T3683] infiniband syz0: added lo [ 42.451733][ T3690] 9p: Bad value for 'rfdno' [ 42.460401][ T3606] loop3: detected capacity change from 0 to 4096 [ 42.468458][ T3683] syz0: rxe_create_qp: returned err = -2 [ 42.491890][ T3683] infiniband syz0: Couldn't create ib_mad QP1 [ 42.519422][ T3683] infiniband syz0: Couldn't open port 1 [ 42.590638][ T3683] RDS/IB: syz0: added [ 42.599405][ T3606] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 42.618100][ T3606] System zones: 0-5 [ 42.643141][ T3683] smc: adding ib device syz0 with port count 1 [ 42.649438][ T3683] smc: ib device syz0 port 1 has no pnetid [ 42.655604][ T3524] lo speed is unknown, defaulting to 1000 [ 42.661876][ T3683] lo speed is unknown, defaulting to 1000 [ 42.801042][ T3683] lo speed is unknown, defaulting to 1000 [ 42.808740][ T3606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.883410][ T3711] netlink: 'syz.2.66': attribute type 29 has an invalid length. [ 42.903673][ T3711] netlink: 'syz.2.66': attribute type 29 has an invalid length. [ 42.904754][ T3708] loop0: detected capacity change from 0 to 4096 [ 42.934749][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.942640][ T3708] EXT4-fs: Ignoring removed bh option [ 42.949481][ T3708] ext4: Unknown parameter 'fsuuid' [ 42.962531][ T3683] lo speed is unknown, defaulting to 1000 [ 42.997520][ T3713] Failed to initialize the IGMP autojoin socket (err -2) [ 43.067354][ T3717] Failed to initialize the IGMP autojoin socket (err -2) [ 43.108710][ T3683] lo speed is unknown, defaulting to 1000 [ 43.185779][ T3683] lo speed is unknown, defaulting to 1000 [ 43.237054][ T3722] syz.1.71 uses obsolete (PF_INET,SOCK_PACKET) [ 43.288137][ T3683] lo speed is unknown, defaulting to 1000 [ 43.349269][ T3728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'. [ 43.397678][ T3733] IPv6: Can't replace route, no match found [ 43.420967][ T3728] team0: Port device team_slave_0 removed [ 43.504047][ T3747] Failed to initialize the IGMP autojoin socket (err -2) [ 43.515186][ T3748] netlink: 'syz.1.79': attribute type 29 has an invalid length. [ 43.527191][ T3737] netlink: 'syz.0.70': attribute type 10 has an invalid length. [ 43.537876][ T3748] netlink: 'syz.1.79': attribute type 29 has an invalid length. [ 43.551019][ T3737] vlan2: entered promiscuous mode [ 43.567051][ T3750] IPv6: Can't replace route, no match found [ 43.570955][ T3737] bridge0: port 3(vlan2) entered blocking state [ 43.582781][ T3737] bridge0: port 3(vlan2) entered disabled state [ 43.618551][ T3737] vlan2: entered allmulticast mode [ 43.639011][ T3737] bridge0: entered allmulticast mode [ 43.656859][ T3737] vlan2: left allmulticast mode [ 43.674131][ T3737] bridge0: left allmulticast mode [ 44.033293][ T3778] Failed to initialize the IGMP autojoin socket (err -2) [ 44.287205][ T3789] loop3: detected capacity change from 0 to 2048 [ 44.321968][ T3797] netlink: 20 bytes leftover after parsing attributes in process `syz.4.98'. [ 44.336673][ T3794] loop0: detected capacity change from 0 to 2048 [ 44.346658][ T3789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.395331][ T3794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.415792][ T3789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.430295][ T3794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.520169][ T3809] Failed to initialize the IGMP autojoin socket (err -2) [ 44.536988][ T3812] netlink: 'syz.3.101': attribute type 10 has an invalid length. [ 44.562890][ T3812] team0: Device ipvlan1 failed to register rx_handler [ 44.591271][ T3817] loop3: detected capacity change from 0 to 164 [ 44.621127][ T3807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.91'. [ 44.657801][ T3817] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 44.941151][ T3826] IPv6: Can't replace route, no match found [ 45.082476][ T3829] tmpfs: Bad value for 'mpol' [ 45.301972][ T3843] loop1: detected capacity change from 0 to 2048 [ 45.335188][ T3843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.353648][ T3843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.366827][ T3844] netlink: 'syz.4.102': attribute type 10 has an invalid length. [ 45.413917][ T3844] vlan2: entered promiscuous mode [ 45.432164][ T3852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.114'. [ 45.435438][ T3844] bridge0: entered promiscuous mode [ 45.463397][ T3852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 45.477832][ T3852] netlink: 'syz.0.114': attribute type 15 has an invalid length. [ 45.489277][ T3844] bridge0: port 3(vlan2) entered blocking state [ 45.496649][ T3844] bridge0: port 3(vlan2) entered disabled state [ 45.511812][ T3844] vlan2: entered allmulticast mode [ 45.519883][ T3844] bridge0: entered allmulticast mode [ 45.533804][ T3844] vlan2: left allmulticast mode [ 45.540288][ T3844] bridge0: left allmulticast mode [ 45.553561][ T3860] loop0: detected capacity change from 0 to 2048 [ 45.590314][ T3860] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 45.598411][ T3860] loop0: partition table partially beyond EOD, truncated [ 45.622923][ T3860] loop0: p1 size 393216 extends beyond EOD, truncated [ 45.644499][ T3860] loop0: p3 start 4225 is beyond EOD, truncated [ 45.661344][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 45.661361][ T28] audit: type=1400 audit(1777424613.418:213): avc: denied { write } for pid=3861 comm="syz.2.116" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.668952][ T3860] loop0: p5 size 393216 extends beyond EOD, [ 45.700214][ T3864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'. [ 45.729990][ T3868] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 45.729990][ T3868] [ 45.741885][ T28] audit: type=1400 audit(1777424613.418:214): avc: denied { ioctl } for pid=3861 comm="syz.2.116" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.748547][ T3860] truncated [ 45.815530][ T3868] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 45.829757][ T3864] team0: Port device team_slave_0 removed [ 45.907177][ T3872] IPv6: Can't replace route, no match found [ 45.969467][ T3875] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.992855][ T3875] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.036707][ T3875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.049991][ T28] audit: type=1400 audit(1777424613.808:215): avc: denied { create } for pid=3877 comm="syz.1.122" name=01 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 46.077840][ T3875] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.099447][ T3885] Failed to initialize the IGMP autojoin socket (err -2) [ 46.184557][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.267458][ T3904] set_capacity_and_notify: 2 callbacks suppressed [ 46.267474][ T3904] loop0: detected capacity change from 0 to 512 [ 46.327790][ T3904] EXT4-fs (loop0): 1 truncate cleaned up [ 46.350699][ T3904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.396330][ T3904] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.862054][ T28] audit: type=1400 audit(1777424614.618:216): avc: denied { unlink } for pid=3295 comm="syz-executor" name=01 dev="tmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 47.435229][ T3922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.128'. [ 47.451917][ T3923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.127'. [ 47.461283][ T3922] netlink: 16 bytes leftover after parsing attributes in process `syz.3.128'. [ 47.470592][ T3922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 47.491438][ T3925] rdma_rxe: Failed to create IPv4 UDP tunnel [ 47.506167][ T3927] IPv6: Can't replace route, no match found [ 47.729439][ T3932] validate_nla: 1 callbacks suppressed [ 47.729452][ T3932] netlink: 'syz.3.131': attribute type 10 has an invalid length. [ 47.745880][ T3932] vlan2: entered promiscuous mode [ 47.750938][ T3932] bridge0: entered promiscuous mode [ 47.758197][ T3932] bridge0: port 3(vlan2) entered blocking state [ 47.765224][ T3932] bridge0: port 3(vlan2) entered disabled state [ 47.771668][ T3932] vlan2: entered allmulticast mode [ 47.776878][ T3932] bridge0: entered allmulticast mode [ 47.783051][ T3932] vlan2: left allmulticast mode [ 47.787999][ T3932] bridge0: left allmulticast mode [ 48.976935][ T3879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 49.042686][ T3935] netlink: 'syz.2.132': attribute type 21 has an invalid length. [ 49.068426][ T3941] netlink: 'syz.0.135': attribute type 1 has an invalid length. [ 49.102058][ T3941] loop0: detected capacity change from 0 to 512 [ 49.126290][ T3941] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.171576][ T3941] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 49.182090][ T3941] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 49.193291][ T3941] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.135: Failed to acquire dquot type 1 [ 49.206689][ T3941] loop0: lost filesystem error report for type 5 error -5 [ 49.208660][ T3941] EXT4-fs (loop0): 1 truncate cleaned up [ 49.215887][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 49.215911][ C1] EXT4-fs (loop0): last error at time 1777424616: ext4_acquire_dquot:7034 [ 49.241365][ T3941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 49.332911][ T3957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.140'. [ 49.384559][ T3948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.134'. [ 49.416633][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 49.480345][ T3964] IPv6: Can't replace route, no match found [ 49.570764][ T3969] IPv6: Can't replace route, no match found [ 49.631349][ T3948] team0: Port device team_slave_0 removed [ 49.706112][ T3978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'. [ 49.715941][ T3978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.147'. [ 49.952868][ T3992] Failed to initialize the IGMP autojoin socket (err -2) [ 50.013905][ T28] audit: type=1400 audit(1777424617.778:217): avc: denied { create } for pid=3994 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.051633][ T3995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 50.068611][ T28] audit: type=1400 audit(1777424617.798:218): avc: denied { bind } for pid=3994 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.102932][ T3997] tmpfs: Bad value for 'mpol' [ 50.124569][ T28] audit: type=1400 audit(1777424617.798:219): avc: denied { listen } for pid=3994 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.183080][ T28] audit: type=1400 audit(1777424617.798:220): avc: denied { connect } for pid=3994 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.259157][ T4005] netlink: 'syz.2.156': attribute type 29 has an invalid length. [ 50.275471][ T4005] netlink: 'syz.2.156': attribute type 29 has an invalid length. [ 50.291058][ T4005] netlink: 500 bytes leftover after parsing attributes in process `syz.2.156'. [ 50.307978][ T4005] unsupported nla_type 58 [ 50.491204][ T4008] netlink: 'syz.0.152': attribute type 10 has an invalid length. [ 50.506505][ T4008] vlan2: entered promiscuous mode [ 50.523175][ T4008] bridge0: port 3(vlan2) entered blocking state [ 50.542257][ T4008] bridge0: port 3(vlan2) entered disabled state [ 50.557726][ T4008] vlan2: entered allmulticast mode [ 50.567552][ T4008] bridge0: entered allmulticast mode [ 50.583141][ T4008] vlan2: left allmulticast mode [ 50.592004][ T4008] bridge0: left allmulticast mode [ 50.615164][ T4025] netlink: 'syz.4.162': attribute type 10 has an invalid length. [ 50.648873][ T4025] ipvlan1: entered allmulticast mode [ 50.660127][ T4025] veth0_vlan: entered allmulticast mode [ 50.669744][ T4029] loop4: detected capacity change from 0 to 164 [ 50.692738][ T4029] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 50.729476][ T4025] team0: Device ipvlan1 failed to register rx_handler [ 50.952722][ T4035] loop1: detected capacity change from 0 to 1024 [ 50.959650][ T4035] EXT4-fs: quotafile must be on filesystem root [ 51.064472][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 51.064489][ T28] audit: type=1400 audit(1777424618.828:226): avc: denied { create } for pid=4042 comm="syz.4.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 51.102930][ T28] audit: type=1400 audit(1777424618.858:227): avc: denied { listen } for pid=4042 comm="syz.4.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 51.113138][ T4044] ./file0: Can't lookup blockdev [ 51.123511][ T28] audit: type=1400 audit(1777424618.858:228): avc: denied { accept } for pid=4042 comm="syz.4.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 51.500483][ T4066] loop3: detected capacity change from 0 to 4096 [ 51.538018][ T4066] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 51.568458][ T4066] System zones: 0-5 [ 51.576672][ T4066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.625432][ T28] audit: type=1400 audit(1777424619.388:229): avc: denied { perfmon } for pid=4072 comm="syz.2.180" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.782354][ T28] audit: type=1400 audit(1777424619.528:230): avc: denied { module_request } for pid=4059 comm="syz.1.176" kmod="netdev-veth0_to_team" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 51.835349][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.937698][ T28] audit: type=1400 audit(1777424619.688:231): avc: denied { mount } for pid=4080 comm="syz.2.182" name="/" dev="ramfs" ino=6934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 52.018828][ T4081] loop2: detected capacity change from 0 to 128 [ 52.026243][ T4089] FAULT_INJECTION: forcing a failure. [ 52.026243][ T4089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.039523][ T28] audit: type=1400 audit(1777424619.728:232): avc: denied { create } for pid=4080 comm="syz.2.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 52.069832][ T4089] CPU: 0 UID: 0 PID: 4089 Comm: syz.3.185 Not tainted syzkaller #0 PREEMPT(full) [ 52.069917][ T4089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 52.069933][ T4089] Call Trace: [ 52.069941][ T4089] [ 52.069953][ T4089] __dump_stack+0x1d/0x30 [ 52.069977][ T4089] dump_stack_lvl+0x95/0xd0 [ 52.070066][ T4089] dump_stack+0x15/0x1b [ 52.070090][ T4089] should_fail_ex+0x263/0x280 [ 52.070154][ T4089] should_fail+0xb/0x20 [ 52.070185][ T4089] should_fail_usercopy+0x1a/0x20 [ 52.070280][ T4089] _copy_to_user+0x20/0xa0 [ 52.070341][ T4089] ucma_create_id+0x21e/0x280 [ 52.070383][ T4089] ? __pfx_ucma_create_id+0x10/0x10 [ 52.070419][ T4089] ucma_write+0x1c9/0x260 [ 52.070475][ T4089] vfs_writev+0x42b/0x900 [ 52.070569][ T4089] ? __pfx_ucma_write+0x10/0x10 [ 52.070656][ T4089] do_writev+0xe9/0x210 [ 52.070676][ T4089] __x64_sys_writev+0x45/0x50 [ 52.070711][ T4089] x64_sys_call+0x1c0c/0x3020 [ 52.070742][ T4089] do_syscall_64+0x12c/0x3b0 [ 52.070836][ T4089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.070927][ T4089] RIP: 0033:0x7f98e99acdd9 [ 52.071020][ T4089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.071044][ T4089] RSP: 002b:00007f98e8407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 52.071064][ T4089] RAX: ffffffffffffffda RBX: 00007f98e9c25fa0 RCX: 00007f98e99acdd9 [ 52.071089][ T4089] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000011 [ 52.071101][ T4089] RBP: 00007f98e8407090 R08: 0000000000000000 R09: 0000000000000000 [ 52.071170][ T4089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.071182][ T4089] R13: 00007f98e9c26038 R14: 00007f98e9c25fa0 R15: 00007ffd2cefbb88 [ 52.071204][ T4089] [ 52.251816][ T28] audit: type=1400 audit(1777424619.768:233): avc: denied { bpf } for pid=4088 comm="syz.3.185" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 52.328528][ T4100] loop1: detected capacity change from 0 to 256 [ 52.336469][ T4100] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.402633][ T4106] loop3: detected capacity change from 0 to 1024 [ 52.430081][ T4106] EXT4-fs: Ignoring removed orlov option [ 52.466912][ T4106] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 52.481940][ T4106] System zones: 0-1, 3-12 [ 52.494127][ T4106] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.554369][ T28] audit: type=1400 audit(1777424620.318:234): avc: denied { setattr } for pid=4101 comm="syz.3.190" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.567907][ T4102] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 16: comm syz.3.190: bad entry in directory: directory entry overrun - offset=60, inode=21519, rec_len=1024, size=1024 fake=0 [ 52.596620][ T28] audit: type=1400 audit(1777424620.318:235): avc: denied { create } for pid=4101 comm="syz.3.190" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 52.753020][ T4110] __nla_validate_parse: 8 callbacks suppressed [ 52.753245][ T4110] netlink: 68 bytes leftover after parsing attributes in process `syz.4.191'. [ 52.897432][ T4119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.190'. [ 52.910462][ T4105] bridge_slave_0: left allmulticast mode [ 52.972167][ T4119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 53.013834][ T4121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.191'. [ 53.055436][ T4122] FAULT_INJECTION: forcing a failure. [ 53.055436][ T4122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.097428][ T4105] bridge_slave_0: left promiscuous mode [ 53.155192][ T4122] CPU: 0 UID: 0 PID: 4122 Comm: syz.2.194 Not tainted syzkaller #0 PREEMPT(full) [ 53.155225][ T4122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 53.155242][ T4122] Call Trace: [ 53.155302][ T4122] [ 53.155312][ T4122] __dump_stack+0x1d/0x30 [ 53.155342][ T4122] dump_stack_lvl+0x95/0xd0 [ 53.155418][ T4122] dump_stack+0x15/0x1b [ 53.155442][ T4122] should_fail_ex+0x263/0x280 [ 53.155563][ T4122] should_fail+0xb/0x20 [ 53.155624][ T4122] should_fail_usercopy+0x1a/0x20 [ 53.155660][ T4122] _copy_to_user+0x20/0xa0 [ 53.155710][ T4122] simple_read_from_buffer+0xb5/0x130 [ 53.155749][ T4122] proc_fail_nth_read+0x10e/0x150 [ 53.155807][ T4122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 53.155841][ T4122] vfs_read+0x1ab/0x7f0 [ 53.155931][ T4122] ? __rcu_read_unlock+0x4e/0x70 [ 53.155956][ T4122] ? __fget_files+0x184/0x1c0 [ 53.155981][ T4122] ? mutex_lock+0x57/0x90 [ 53.156075][ T4122] ksys_read+0xdc/0x1a0 [ 53.156175][ T4122] __x64_sys_read+0x40/0x50 [ 53.156210][ T4122] x64_sys_call+0x2886/0x3020 [ 53.156271][ T4122] do_syscall_64+0x12c/0x3b0 [ 53.156302][ T4122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.156373][ T4122] RIP: 0033:0x7f41fdfbd60e [ 53.156393][ T4122] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 53.156415][ T4122] RSP: 002b:00007f41fca56fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.156440][ T4122] RAX: ffffffffffffffda RBX: 00007f41fca576c0 RCX: 00007f41fdfbd60e [ 53.156478][ T4122] RDX: 000000000000000f RSI: 00007f41fca570a0 RDI: 0000000000000004 [ 53.156493][ T4122] RBP: 00007f41fca57090 R08: 0000000000000000 R09: 0000000000000000 [ 53.156507][ T4122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.156520][ T4122] R13: 00007f41fe276038 R14: 00007f41fe275fa0 R15: 00007fff320782f8 [ 53.156543][ T4122] [ 53.161618][ T4105] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.210015][ T4124] loop4: detected capacity change from 0 to 256 [ 53.373110][ T4105] bridge_slave_1: left allmulticast mode [ 53.378863][ T4105] bridge_slave_1: left promiscuous mode [ 53.402620][ T4105] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.419826][ T4105] bond0: (slave bond_slave_0): Releasing backup interface [ 53.435415][ T4105] bond0: (slave bond_slave_1): Releasing backup interface [ 53.455069][ T4105] team0: Port device team_slave_1 removed [ 53.464312][ T4105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.473129][ T4105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.484703][ T4105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.492994][ T4105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.507073][ T4105] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 53.524003][ T3382] lo speed is unknown, defaulting to 1000 [ 53.554076][ T4106] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 53.571160][ T4106] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 53.629994][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 53.670119][ T4130] can0: slcan on ptm0. [ 53.838995][ T4148] ucma_write: process 117 (syz.3.202) changed security contexts after opening file descriptor, this is not allowed. [ 53.911637][ T4160] netlink: 'syz.3.204': attribute type 10 has an invalid length. [ 53.966764][ T4167] loop3: detected capacity change from 0 to 164 [ 53.974161][ T4160] team0: Device ipvlan1 failed to register rx_handler [ 54.008588][ T4167] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 54.052197][ T4165] netlink: 32 bytes leftover after parsing attributes in process `syz.0.205'. [ 54.216427][ T4176] loop7: detected capacity change from 0 to 7 [ 54.372457][ T4183] loop3: detected capacity change from 0 to 2048 [ 54.395732][ T4183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.428523][ T4189] netlink: 'syz.0.213': attribute type 1 has an invalid length. [ 54.444452][ T4189] loop0: detected capacity change from 0 to 512 [ 54.454842][ T4189] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.487795][ T4189] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.213: Failed to acquire dquot type 1 [ 54.509380][ T4189] loop0: lost filesystem error report for type 5 error -5 [ 54.510570][ T4189] EXT4-fs (loop0): 1 truncate cleaned up [ 54.517827][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 54.517843][ C0] EXT4-fs (loop0): last error at time 1777424622: ext4_acquire_dquot:7034 [ 54.539531][ T4129] can0 (unregistered): slcan off ptm0. [ 54.593303][ T36] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 54.622958][ T4189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 54.629297][ T36] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 54.678890][ T36] EXT4-fs (loop3): This should not happen!! Data will be lost [ 54.678890][ T36] [ 54.700755][ T36] EXT4-fs (loop3): Total free blocks count 0 [ 54.710741][ T36] EXT4-fs (loop3): Free/Dirty block details [ 54.717083][ T36] EXT4-fs (loop3): free_blocks=4096 [ 54.722578][ T36] EXT4-fs (loop3): dirty_blocks=896 [ 54.727818][ T36] EXT4-fs (loop3): Block reservation details [ 54.734020][ T36] EXT4-fs (loop3): i_reserved_data_blocks=56 [ 54.741623][ T36] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 864 with error 28 [ 54.769822][ T3300] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 54.808488][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 54.864894][ T4214] rdma_rxe: Failed to create IPv4 UDP tunnel [ 54.933579][ T4217] loop1: detected capacity change from 0 to 512 [ 54.957353][ T4217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 54.999511][ T4224] syzkaller0: entered promiscuous mode [ 55.009400][ T4224] syzkaller0: entered allmulticast mode [ 55.017293][ T4217] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 3: comm syz.1.218: lblock 0 mapped to illegal pblock 3 (length 1) [ 55.024798][ T4221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4221 comm=syz.0.219 [ 55.031644][ T4217] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.218: error -117 reading directory block [ 55.062986][ T4217] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 3: comm syz.1.218: lblock 0 mapped to illegal pblock 3 (length 1) [ 55.093674][ T4217] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.218: error -117 reading directory block [ 55.128257][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.279094][ T4232] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 55.298036][ T4232] System zones: 0-5 [ 55.344693][ T4232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.395113][ T4235] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 55.604137][ T4243] netlink: 'syz.1.227': attribute type 1 has an invalid length. [ 55.675708][ T4243] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.691621][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.716385][ T4243] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.227: Failed to acquire dquot type 1 [ 55.728556][ T4243] loop1: lost filesystem error report for type 5 error -5 [ 55.731775][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 55.742195][ T4243] EXT4-fs (loop1): 1 truncate cleaned up [ 55.745411][ C1] EXT4-fs (loop1): last error at time 1777424623: ext4_acquire_dquot:7034 [ 55.771875][ T4243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 55.775292][ T4213] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 55.794505][ T4213] System zones: 0-5 [ 55.872704][ T4213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.928142][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.958351][ T4261] netlink: 68 bytes leftover after parsing attributes in process `syz.0.228'. [ 55.991001][ T4260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.031309][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.042253][ T4267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.228'. [ 56.056165][ T4267] team0 (unregistering): Port device team_slave_1 removed [ 56.064427][ T4263] Alternate GPT is invalid, using primary GPT. [ 56.070949][ T4263] loop3: p1 p2 p3 [ 56.173043][ T4275] netlink: 'syz.3.233': attribute type 10 has an invalid length. [ 56.197997][ T4256] bridge_slave_0: left allmulticast mode [ 56.204358][ T4256] bridge_slave_0: left promiscuous mode [ 56.205892][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 56.222758][ T4277] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 56.230972][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.258212][ T4256] bridge_slave_1: left allmulticast mode [ 56.271595][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 56.271611][ T28] audit: type=1400 audit(1777424624.028:255): avc: denied { write } for pid=4278 comm="syz.1.234" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.273813][ T4256] bridge_slave_1: left promiscuous mode [ 56.277851][ T28] audit: type=1400 audit(1777424624.038:256): avc: denied { ioctl } for pid=4278 comm="syz.1.234" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.343680][ T28] audit: type=1400 audit(1777424624.108:257): avc: denied { ioctl } for pid=4272 comm="syz.4.232" path="socket:[7390]" dev="sockfs" ino=7390 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.369357][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.388735][ T4256] bond0: (slave bond_slave_0): Releasing backup interface [ 56.401065][ T4256] bond0: (slave bond_slave_1): Releasing backup interface [ 56.415482][ T4256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.423130][ T4256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.433754][ T4256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.443023][ T4256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.450391][ T28] audit: type=1400 audit(1777424624.208:258): avc: denied { bind } for pid=4281 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.474347][ T4280] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 56.487890][ T4256] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 56.505531][ T4270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 56.514921][ T4280] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 56.534704][ T4270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.231'. [ 56.545740][ T4275] team0: Device ipvlan1 failed to register rx_handler [ 56.561438][ T4273] netlink: 7 bytes leftover after parsing attributes in process `syz.4.232'. [ 56.599507][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.608591][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.617970][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.634127][ T57] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.730115][ T4293] can0: slcan on ttyS3. [ 56.782546][ T4289] set_capacity_and_notify: 8 callbacks suppressed [ 56.782641][ T4289] loop1: detected capacity change from 0 to 2048 [ 56.791912][ T4293] can0 (unregistered): slcan off ttyS3. [ 56.821078][ T4296] can0: slcan on ttyS3. [ 56.871095][ T4289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.895093][ T4289] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #12: block 2: comm syz.1.237: lblock 0 mapped to illegal pblock 2 (length 1) [ 56.909508][ T28] audit: type=1400 audit(1777424624.658:259): avc: denied { read } for pid=4288 comm="syz.1.237" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 56.932133][ T4292] can0 (unregistered): slcan off ttyS3. [ 56.997811][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.045471][ T4305] netlink: 'syz.2.238': attribute type 10 has an invalid length. [ 57.173847][ T4338] netlink: 'syz.4.244': attribute type 1 has an invalid length. [ 57.208473][ T4338] loop4: detected capacity change from 0 to 512 [ 57.240286][ T4338] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.972194][ T4346] loop3: detected capacity change from 0 to 1024 [ 58.205247][ T28] audit: type=1400 audit(1777424625.408:260): avc: denied { write } for pid=4321 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.352045][ T4346] EXT4-fs (loop3): filesystem too large to mount safely on this system [ 58.957333][ T4338] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 58.982389][ T4338] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 59.026321][ T4338] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.244: Failed to acquire dquot type 1 [ 59.057224][ T4338] loop4: lost filesystem error report for type 5 error -5 [ 59.058180][ T4338] EXT4-fs (loop4): 1 truncate cleaned up [ 59.065392][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 59.065409][ C1] EXT4-fs (loop4): last error at time 1777424626: ext4_acquire_dquot:7034 [ 59.124505][ T4338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 59.242998][ T4362] __nla_validate_parse: 2 callbacks suppressed [ 59.243015][ T4362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'. [ 59.282203][ T4362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.248'. [ 59.319803][ T107] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.347930][ T107] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.376520][ T107] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.533296][ T4368] netlink: 'syz.2.251': attribute type 1 has an invalid length. [ 59.553043][ T107] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.575289][ T4369] loop2: detected capacity change from 0 to 512 [ 59.582195][ T4369] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.680628][ T4369] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.947914][ T4372] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 60.069671][ T28] audit: type=1400 audit(1777424627.798:261): avc: denied { create } for pid=4365 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 60.100409][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 60.450017][ T4369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.486126][ T4369] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.513475][ T4387] FAULT_INJECTION: forcing a failure. [ 60.513475][ T4387] name failslab, interval 1, probability 0, space 0, times 0 [ 60.513558][ T4387] CPU: 1 UID: 0 PID: 4387 Comm: syz.4.253 Not tainted syzkaller #0 PREEMPT(full) [ 60.513585][ T4387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 60.513598][ T4387] Call Trace: [ 60.513605][ T4387] [ 60.513615][ T4387] __dump_stack+0x1d/0x30 [ 60.513656][ T4387] dump_stack_lvl+0x95/0xd0 [ 60.513683][ T4387] dump_stack+0x15/0x1b [ 60.513782][ T4387] should_fail_ex+0x263/0x280 [ 60.513818][ T4387] should_failslab+0x8c/0xb0 [ 60.513858][ T4387] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 60.513897][ T4387] ? alloc_vmap_area+0x1b6/0xe10 [ 60.513999][ T4387] ? lapic_next_event+0x11/0x20 [ 60.514027][ T4387] alloc_vmap_area+0x1b6/0xe10 [ 60.514063][ T4387] ? _prb_read_valid+0x8f0/0x950 [ 60.514136][ T4387] ? __kmalloc_cache_node_noprof+0x3a1/0x470 [ 60.514172][ T4387] __get_vm_area_node+0x173/0x1d0 [ 60.514339][ T4387] __vmalloc_node_range_noprof+0x25a/0x11c0 [ 60.514365][ T4387] ? vc_uniscr_check+0x11f/0x4a0 [ 60.514398][ T4387] ? _prb_read_valid+0x8f0/0x950 [ 60.514432][ T4387] ? is_printk_cpu_sync_owner+0x2d/0x40 [ 60.514506][ T4387] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 60.514538][ T4387] ? vc_uniscr_check+0x11f/0x4a0 [ 60.514622][ T4387] vzalloc_noprof+0x82/0xb0 [ 60.514640][ T4387] ? vc_uniscr_check+0x11f/0x4a0 [ 60.514664][ T4387] vc_uniscr_check+0x11f/0x4a0 [ 60.514740][ T4387] ? csi_ECMA+0x2325/0x2ec0 [ 60.514763][ T4387] ? __rcu_read_unlock+0x4e/0x70 [ 60.514787][ T4387] vc_get_glyph+0xf8/0x150 [ 60.514812][ T4387] do_con_write+0x98d/0x2d40 [ 60.514877][ T4387] con_write+0x25/0x1d0 [ 60.514910][ T4387] n_tty_write+0x826/0xb80 [ 60.514936][ T4387] ? __pfx_woken_wake_function+0x10/0x10 [ 60.514965][ T4387] ? __pfx_n_tty_write+0x10/0x10 [ 60.515012][ T4387] file_tty_write+0x378/0x680 [ 60.515039][ T4387] ? __pfx_tty_write+0x10/0x10 [ 60.515067][ T4387] tty_write+0x25/0x30 [ 60.515105][ T4387] vfs_write+0x5a6/0x9f0 [ 60.515149][ T4387] ksys_write+0xdc/0x1a0 [ 60.515303][ T4387] __x64_sys_write+0x40/0x50 [ 60.515330][ T4387] x64_sys_call+0x27e1/0x3020 [ 60.515410][ T4387] do_syscall_64+0x12c/0x3b0 [ 60.515458][ T4387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.515569][ T4387] RIP: 0033:0x7f150497cdd9 [ 60.515585][ T4387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.515603][ T4387] RSP: 002b:00007f15033d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 60.515626][ T4387] RAX: ffffffffffffffda RBX: 00007f1504bf5fa0 RCX: 00007f150497cdd9 [ 60.515644][ T4387] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000004 [ 60.515660][ T4387] RBP: 00007f15033d7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.515675][ T4387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.515695][ T4387] R13: 00007f1504bf6038 R14: 00007f1504bf5fa0 R15: 00007ffeae7baeb8 [ 60.515720][ T4387] [ 60.532045][ T4387] syz.4.253: vmalloc error: size 8200, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 60.532157][ T4387] CPU: 1 UID: 0 PID: 4387 Comm: syz.4.253 Not tainted syzkaller #0 PREEMPT(full) [ 60.532190][ T4387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 60.532206][ T4387] Call Trace: [ 60.532215][ T4387] [ 60.532269][ T4387] __dump_stack+0x1d/0x30 [ 60.532295][ T4387] dump_stack_lvl+0x95/0xd0 [ 60.532324][ T4387] dump_stack+0x15/0x1b [ 60.532350][ T4387] warn_alloc+0x145/0x1c0 [ 60.532493][ T4387] __vmalloc_node_range_noprof+0x27f/0x11c0 [ 60.532598][ T4387] ? _prb_read_valid+0x8f0/0x950 [ 60.532635][ T4387] ? is_printk_cpu_sync_owner+0x2d/0x40 [ 60.532683][ T4387] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 60.532757][ T4387] ? vc_uniscr_check+0x11f/0x4a0 [ 60.532791][ T4387] vzalloc_noprof+0x82/0xb0 [ 60.532851][ T4387] ? vc_uniscr_check+0x11f/0x4a0 [ 60.532883][ T4387] vc_uniscr_check+0x11f/0x4a0 [ 60.532917][ T4387] ? csi_ECMA+0x2325/0x2ec0 [ 60.532943][ T4387] ? __rcu_read_unlock+0x4e/0x70 [ 60.532970][ T4387] vc_get_glyph+0xf8/0x150 [ 60.533058][ T4387] do_con_write+0x98d/0x2d40 [ 60.533102][ T4387] con_write+0x25/0x1d0 [ 60.533205][ T4387] n_tty_write+0x826/0xb80 [ 60.533237][ T4387] ? __pfx_woken_wake_function+0x10/0x10 [ 60.533283][ T4387] ? __pfx_n_tty_write+0x10/0x10 [ 60.533302][ T4387] file_tty_write+0x378/0x680 [ 60.533332][ T4387] ? __pfx_tty_write+0x10/0x10 [ 60.533367][ T4387] tty_write+0x25/0x30 [ 60.533413][ T4387] vfs_write+0x5a6/0x9f0 [ 60.533464][ T4387] ksys_write+0xdc/0x1a0 [ 60.533577][ T4387] __x64_sys_write+0x40/0x50 [ 60.533706][ T4387] x64_sys_call+0x27e1/0x3020 [ 60.533742][ T4387] do_syscall_64+0x12c/0x3b0 [ 60.533777][ T4387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.533818][ T4387] RIP: 0033:0x7f150497cdd9 [ 60.533838][ T4387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.533862][ T4387] RSP: 002b:00007f15033d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 60.533882][ T4387] RAX: ffffffffffffffda RBX: 00007f1504bf5fa0 RCX: 00007f150497cdd9 [ 60.533949][ T4387] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000004 [ 60.533967][ T4387] RBP: 00007f15033d7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.533984][ T4387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.534000][ T4387] R13: 00007f1504bf6038 R14: 00007f1504bf5fa0 R15: 00007ffeae7baeb8 [ 60.534037][ T4387] [ 60.539255][ T4387] Mem-Info: [ 60.539267][ T4387] active_anon:23508 inactive_anon:0 isolated_anon:0 [ 60.539267][ T4387] active_file:24048 inactive_file:2518 isolated_file:0 [ 60.539267][ T4387] unevictable:0 dirty:540 writeback:0 [ 60.539267][ T4387] slab_reclaimable:3254 slab_unreclaimable:17209 [ 60.539267][ T4387] mapped:29419 shmem:15714 pagetables:1242 [ 60.539267][ T4387] sec_pagetables:0 bounce:0 [ 60.539267][ T4387] kernel_misc_reclaimable:0 [ 60.539267][ T4387] free:1861620 free_pcp:6261 free_cma:0 [ 60.539411][ T4387] Node 0 active_anon:94032kB inactive_anon:0kB active_file:96192kB inactive_file:10072kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117676kB dirty:2160kB writeback:0kB shmem:62856kB kernel_stack:3552kB pagetables:4968kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 60.539527][ T4387] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 60.539643][ T4387] lowmem_reserve[]: 0 2878 7857 7857 [ 60.539692][ T4387] Node 0 DMA32 free:2944460kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948088kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 60.539776][ T4387] lowmem_reserve[]: 0 0 4978 4978 [ 60.539891][ T4387] Node 0 Normal free:4486660kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:94032kB inactive_anon:0kB active_file:96192kB inactive_file:10072kB unevictable:0kB writepending:2160kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:21416kB local_pcp:16336kB free_cma:0kB [ 60.540085][ T4387] lowmem_reserve[]: 0 0 0 0 [ 60.540132][ T4387] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 60.540364][ T4387] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 2*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944460kB [ 60.540761][ T4387] Node 0 Normal: 501*4kB (M) 175*8kB (UME) 73*16kB (UME) 52*32kB (M) 235*64kB (M) 136*128kB (UME) 51*256kB (UME) 14*512kB (UM) 2*1024kB (UM) 3*2048kB (UME) 1079*4096kB (M) = 4486684kB [ 60.541087][ T4387] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 60.541109][ T4387] 42276 total pagecache pages [ 60.541159][ T4387] 0 pages in swap cache [ 60.541166][ T4387] Free swap = 124996kB [ 60.541238][ T4387] Total swap = 124996kB [ 60.541246][ T4387] 2097051 pages RAM [ 60.541253][ T4387] 0 pages HighMem/MovableOnly [ 60.541263][ T4387] 81630 pages reserved [ 60.737785][ T4393] netlink: 'syz.1.259': attribute type 10 has an invalid length. [ 60.784689][ T4393] team0: Device ipvlan1 failed to register rx_handler [ 61.052366][ T4396] loop1: detected capacity change from 0 to 164 [ 61.527006][ T4393] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 61.635883][ T4403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'. [ 61.644989][ T4404] netlink: 'syz.4.262': attribute type 29 has an invalid length. [ 61.656002][ T4404] netlink: 'syz.4.262': attribute type 29 has an invalid length. [ 61.664101][ T4403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.261'. [ 61.721669][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.571875][ T4414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.264'. [ 62.599190][ T28] audit: type=1400 audit(1777424630.348:262): avc: denied { create } for pid=4407 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 62.811530][ T4425] FAULT_INJECTION: forcing a failure. [ 62.811530][ T4425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.885541][ T4425] CPU: 1 UID: 0 PID: 4425 Comm: syz.4.268 Not tainted syzkaller #0 PREEMPT(full) [ 62.885569][ T4425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 62.885581][ T4425] Call Trace: [ 62.885587][ T4425] [ 62.885594][ T4425] __dump_stack+0x1d/0x30 [ 62.885622][ T4425] dump_stack_lvl+0x95/0xd0 [ 62.885705][ T4425] dump_stack+0x15/0x1b [ 62.885726][ T4425] should_fail_ex+0x263/0x280 [ 62.885765][ T4425] should_fail+0xb/0x20 [ 62.885788][ T4425] should_fail_usercopy+0x1a/0x20 [ 62.885879][ T4425] _copy_from_iter+0xcf/0xea0 [ 62.885911][ T4425] ? __kmalloc_large_node_noprof+0x9c/0x150 [ 62.885955][ T4425] ? __kmalloc_noprof+0x2a1/0x4d0 [ 62.885993][ T4425] ? bcm_tx_setup+0x363/0xde0 [ 62.886154][ T4425] bcm_tx_setup+0x43a/0xde0 [ 62.886295][ T4425] bcm_sendmsg+0x357/0x4a0 [ 62.886328][ T4425] ? __pfx_bcm_sendmsg+0x10/0x10 [ 62.886354][ T4425] ____sys_sendmsg+0x563/0x5b0 [ 62.886377][ T4425] ___sys_sendmsg+0x195/0x1e0 [ 62.886463][ T4425] __x64_sys_sendmsg+0xd4/0x160 [ 62.886490][ T4425] x64_sys_call+0x194c/0x3020 [ 62.886528][ T4425] do_syscall_64+0x12c/0x3b0 [ 62.886552][ T4425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.886623][ T4425] RIP: 0033:0x7f150497cdd9 [ 62.886637][ T4425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.886654][ T4425] RSP: 002b:00007f15033d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.886672][ T4425] RAX: ffffffffffffffda RBX: 00007f1504bf5fa0 RCX: 00007f150497cdd9 [ 62.886688][ T4425] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 62.886703][ T4425] RBP: 00007f15033d7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.886742][ T4425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 62.886754][ T4425] R13: 00007f1504bf6038 R14: 00007f1504bf5fa0 R15: 00007ffeae7baeb8 [ 62.886771][ T4425] [ 63.106959][ T4421] loop1: detected capacity change from 0 to 256 [ 63.113684][ T4421] vfat: Unknown parameter '' [ 63.147245][ T4429] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 63.199692][ T4432] loop0: detected capacity change from 0 to 512 [ 63.225785][ T4432] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 63.242402][ T3286] udevd[3286]: incorrect ext4 checksum on /dev/loop0 [ 63.311856][ T28] audit: type=1400 audit(1777424631.028:263): avc: denied { setopt } for pid=4428 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.351151][ T28] audit: type=1400 audit(1777424631.028:264): avc: denied { write } for pid=4428 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.388815][ T28] audit: type=1400 audit(1777424631.088:265): avc: denied { read } for pid=4428 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.445346][ T4444] loop3: detected capacity change from 0 to 512 [ 63.491009][ T4444] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.274: bad orphan inode 15 [ 63.509948][ T4442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.271'. [ 63.518959][ T4444] loop3: lost filesystem error report for type 5 error -117 [ 63.520048][ T4444] ext4_test_bit(bit=14, block=18) = 1 [ 63.527463][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 63.527501][ C1] EXT4-fs (loop3): initial error at time 1777424631: ext4_orphan_get:1423 [ 63.527525][ C1] EXT4-fs (loop3): last error at time 1777424631: ext4_orphan_get:1423 [ 63.564950][ T4448] loop0: detected capacity change from 0 to 4096 [ 63.566163][ T4444] is_bad_inode(inode)=0 [ 63.575588][ T4444] NEXT_ORPHAN(inode)=1023 [ 63.580061][ T4444] max_ino=32 [ 63.585901][ T4444] i_nlink=0 [ 63.589503][ T4444] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #15: comm syz.3.274: corrupted xattr block 19: bad e_name length [ 63.604311][ T4444] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.604473][ T4444] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 63.633529][ T4448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.653925][ T4444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 63.666957][ T4444] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.720908][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 63.913308][ T4473] loop1: detected capacity change from 0 to 1024 [ 63.920169][ T4473] EXT4-fs: Ignoring removed nobh option [ 63.950939][ T4473] EXT4-fs: Ignoring removed i_version option [ 63.973525][ T4473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.016542][ T28] audit: type=1400 audit(1777424631.778:266): avc: denied { append } for pid=4472 comm="syz.1.280" path="/58/file1/cpuacct.usage_percpu_user" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.073703][ T28] audit: type=1400 audit(1777424631.838:267): avc: denied { map } for pid=4472 comm="syz.1.280" path="/58/file1/cpuacct.usage_percpu_user" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.090617][ T4473] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 64.148722][ T4473] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 764 with error 28 [ 64.177014][ T4473] EXT4-fs (loop1): This should not happen!! Data will be lost [ 64.177014][ T4473] [ 64.212058][ T4473] EXT4-fs (loop1): Total free blocks count 0 [ 64.218122][ T4473] EXT4-fs (loop1): Free/Dirty block details [ 64.240560][ T4473] EXT4-fs (loop1): free_blocks=20480 [ 64.265807][ T4473] EXT4-fs (loop1): dirty_blocks=768 [ 64.280737][ T4473] EXT4-fs (loop1): Block reservation details [ 64.298059][ T4473] EXT4-fs (loop1): i_reserved_data_blocks=48 [ 64.329148][ T28] audit: type=1400 audit(1777424632.088:268): avc: denied { ioctl } for pid=4472 comm="syz.1.280" path="/58/file1/cpuacct.usage_percpu_user" dev="loop1" ino=18 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.356690][ T4487] loop2: detected capacity change from 0 to 512 [ 64.389791][ T4487] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 64.542562][ T57] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 64.572590][ T3295] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 64.696111][ T28] audit: type=1400 audit(1777424632.458:269): avc: denied { read } for pid=4495 comm="syz.1.286" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 64.696142][ T28] audit: type=1400 audit(1777424632.458:270): avc: denied { open } for pid=4495 comm="syz.1.286" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 64.733155][ T28] audit: type=1400 audit(1777424632.458:271): avc: denied { ioctl } for pid=4495 comm="syz.1.286" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 64.750054][ T4496] loop1: detected capacity change from 0 to 256 [ 65.064599][ T4506] netlink: 24 bytes leftover after parsing attributes in process `syz.4.291'. [ 65.214220][ T4512] netlink: 'syz.4.294': attribute type 10 has an invalid length. [ 65.273541][ T4514] loop4: detected capacity change from 0 to 164 [ 65.483455][ T4512] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 65.778417][ T4519] can0: slcan on ptm0. [ 66.112083][ T4520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.292'. [ 66.348271][ T4512] netlink: 40 bytes leftover after parsing attributes in process `syz.4.294'. [ 66.407632][ T4541] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 66.495613][ T4550] netlink: 'syz.4.298': attribute type 21 has an invalid length. [ 66.509489][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.626484][ T4518] can0 (unregistered): slcan off ptm0. [ 66.825098][ T4596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.304'. [ 66.921928][ T4593] netlink: 16 bytes leftover after parsing attributes in process `syz.0.299'. [ 66.992145][ T4609] netlink: 'syz.0.299': attribute type 10 has an invalid length. [ 67.028745][ T4609] vlan2: entered promiscuous mode [ 67.046008][ T4609] bridge0: port 1(vlan2) entered blocking state [ 67.052545][ T4611] loop3: detected capacity change from 0 to 1024 [ 67.059060][ T4609] bridge0: port 1(vlan2) entered disabled state [ 67.091973][ T4609] vlan2: entered allmulticast mode [ 67.110024][ T4611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 67.123621][ T4609] bridge0: entered allmulticast mode [ 67.135266][ T4609] vlan2: left allmulticast mode [ 67.140225][ T4609] bridge0: left allmulticast mode [ 67.160671][ T4611] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.187341][ T4611] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.306: lblock 3 mapped to illegal pblock 3 (length 1) [ 67.216363][ T4611] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 67.217099][ T4625] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.309'. [ 67.261062][ T4611] EXT4-fs (loop3): This should not happen!! Data will be lost [ 67.261062][ T4611] [ 67.318714][ T4630] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 67.334371][ T4611] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.306: Freeing blocks not in datazone - block = 3, count = 1 [ 67.470167][ T4637] loop4: detected capacity change from 0 to 128 [ 67.496204][ T4637] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 67.602246][ T28] kauditd_printk_skb: 396 callbacks suppressed [ 67.602265][ T28] audit: type=1326 audit(1777424635.358:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fdffcdd9 code=0x50000 [ 67.640497][ T4643] FAULT_INJECTION: forcing a failure. [ 67.640497][ T4643] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 67.653743][ T4643] CPU: 1 UID: 0 PID: 4643 Comm: syz.0.314 Not tainted syzkaller #0 PREEMPT(full) [ 67.653789][ T4643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 67.653813][ T4643] Call Trace: [ 67.653820][ T4643] [ 67.653829][ T4643] __dump_stack+0x1d/0x30 [ 67.653857][ T4643] dump_stack_lvl+0x95/0xd0 [ 67.653886][ T4643] dump_stack+0x15/0x1b [ 67.653911][ T4643] should_fail_ex+0x263/0x280 [ 67.653956][ T4643] should_fail_alloc_page+0xf2/0x100 [ 67.654074][ T4643] __alloc_frozen_pages_noprof+0x108/0x350 [ 67.654105][ T4643] alloc_pages_mpol+0xb3/0x260 [ 67.654137][ T4643] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 67.654171][ T4643] handle_mm_fault+0x103e/0x2e70 [ 67.654329][ T4643] ? vma_start_read+0x1c7/0x2c0 [ 67.654366][ T4643] do_user_addr_fault+0x62f/0x1050 [ 67.654422][ T4643] ? irqentry_exit+0x40/0x5b0 [ 67.654459][ T4643] ? trace_page_fault_user+0x1f/0xa0 [ 67.654488][ T4643] exc_page_fault+0x62/0xa0 [ 67.654810][ T4643] asm_exc_page_fault+0x26/0x30 [ 67.654838][ T4643] RIP: 0033:0x7fbcc76c3e63 [ 67.654858][ T4643] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 67.654882][ T4643] RSP: 002b:00007fbcc625e470 EFLAGS: 00010206 [ 67.654923][ T4643] RAX: 0000000000009000 RBX: 00007fbcc625e530 RCX: 00007fbcbde3f000 [ 67.654938][ T4643] RDX: 00007fbcc625e6d0 RSI: 0000000000000001 RDI: 00007fbcc625e5d0 [ 67.654951][ T4643] RBP: 0000000000000011 R08: 000000000000000a R09: 00000000000003b3 [ 67.654962][ T4643] R10: 00000000000003ca R11: 00007fbcc625e530 R12: 0000000000000001 [ 67.654973][ T4643] R13: 00007fbcc78c2900 R14: 0000000000000011 R15: 00007fbcc625e5d0 [ 67.654994][ T4643] [ 67.655014][ T4643] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 67.838334][ T28] audit: type=1326 audit(1777424635.368:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fdffcdd9 code=0x50000 [ 67.867663][ T28] audit: type=1326 audit(1777424635.368:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fdffcdd9 code=0x50000 [ 67.890764][ T28] audit: type=1326 audit(1777424635.368:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fdffcdd9 code=0x50000 [ 67.939578][ T28] audit: type=1326 audit(1777424635.368:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fdffcdd9 code=0x50000 [ 67.973290][ T28] audit: type=1326 audit(1777424635.368:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fdffcdd9 code=0x50000 [ 67.997180][ T28] audit: type=1326 audit(1777424635.368:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fdffcdd9 code=0x50000 [ 68.020581][ T28] audit: type=1326 audit(1777424635.368:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fdffcdd9 code=0x50000 [ 68.043819][ T28] audit: type=1326 audit(1777424635.368:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fdffcdd9 code=0x50000 [ 68.067174][ T28] audit: type=1326 audit(1777424635.368:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fdffcdd9 code=0x50000 [ 68.094615][ T4643] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.124602][ T4643] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 68.155112][ T4643] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.314: bg 0: block 248: padding at end of block bitmap is not set [ 68.169330][ T4643] loop0: lost filesystem error report for type 5 error -117 [ 68.201613][ T4648] set_capacity_and_notify: 1 callbacks suppressed [ 68.201633][ T4648] loop4: detected capacity change from 0 to 256 [ 68.214143][ T4626] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.306: bg 0: block 112: padding at end of block bitmap is not set [ 68.223937][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 68.242455][ C1] EXT4-fs (loop0): last error at time 1777424635: ext4_validate_block_bitmap:441 [ 68.256819][ T4643] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.314: Failed to acquire dquot type 1 [ 68.269259][ T4626] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1508 with error 28 [ 68.284889][ T4648] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.303778][ T4643] loop0: lost filesystem error report for type 5 error -28 [ 68.313991][ T4643] EXT4-fs (loop0): 1 truncate cleaned up [ 68.327498][ T4643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 68.340665][ T4648] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.363394][ T4626] EXT4-fs (loop3): This should not happen!! Data will be lost [ 68.363394][ T4626] [ 68.373071][ T4626] EXT4-fs (loop3): Total free blocks count 0 [ 68.379075][ T4626] EXT4-fs (loop3): Free/Dirty block details [ 68.384996][ T4626] EXT4-fs (loop3): free_blocks=0 [ 68.389956][ T4626] EXT4-fs (loop3): dirty_blocks=1520 [ 68.395708][ T4648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.315'. [ 68.416805][ T4626] EXT4-fs (loop3): Block reservation details [ 68.438794][ T4648] netlink: 'syz.4.315': attribute type 17 has an invalid length. [ 68.443880][ T4643] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.314: Failed to acquire dquot type 1 [ 68.469355][ T4643] tmpfs: Unknown parameter 'siz˙' [ 68.473889][ T4648] netlink: 148 bytes leftover after parsing attributes in process `syz.4.315'. [ 68.484366][ T4650] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 68.522516][ T3300] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 68.537922][ T4643] syz.0.314 (4643) used greatest stack depth: 7952 bytes left [ 68.559469][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 68.596624][ T4654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.317'. [ 68.640603][ T4658] netlink: 'syz.4.319': attribute type 29 has an invalid length. [ 68.653948][ T4651] loop1: detected capacity change from 0 to 8192 [ 68.670547][ T4660] netlink: 'syz.3.320': attribute type 62 has an invalid length. [ 68.682120][ T4651] vfat: Unknown parameter '0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff' [ 68.696233][ T4660] netlink: 24 bytes leftover after parsing attributes in process `syz.3.320'. [ 68.714295][ T4661] netlink: 'syz.4.319': attribute type 29 has an invalid length. [ 68.754861][ T4660] loop3: detected capacity change from 0 to 1024 [ 68.793972][ T4660] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 68.832276][ T4650] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 68.840495][ T4650] IPv6: NLM_F_CREATE should be set when creating new route [ 68.877859][ T4660] loop3: detected capacity change from 0 to 764 [ 68.912110][ T4660] iso9660: Unknown parameter 'sc' [ 68.927992][ T4671] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 69.047186][ T4679] FAULT_INJECTION: forcing a failure. [ 69.047186][ T4679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.081642][ T4679] CPU: 0 UID: 0 PID: 4679 Comm: syz.3.324 Not tainted syzkaller #0 PREEMPT(full) [ 69.081676][ T4679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 69.081692][ T4679] Call Trace: [ 69.081702][ T4679] [ 69.081713][ T4679] __dump_stack+0x1d/0x30 [ 69.081744][ T4679] dump_stack_lvl+0x95/0xd0 [ 69.081771][ T4679] dump_stack+0x15/0x1b [ 69.081795][ T4679] should_fail_ex+0x263/0x280 [ 69.081823][ T4679] should_fail+0xb/0x20 [ 69.081928][ T4679] should_fail_usercopy+0x1a/0x20 [ 69.081965][ T4679] _copy_from_user+0x1c/0xb0 [ 69.082082][ T4679] kstrtouint_from_user+0x69/0xf0 [ 69.082110][ T4679] ? 0xffffffff81000000 [ 69.082199][ T4679] ? selinux_file_permission+0x1e1/0x320 [ 69.082254][ T4679] proc_fail_nth_write+0x50/0x160 [ 69.082336][ T4679] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 69.082367][ T4679] vfs_write+0x269/0x9f0 [ 69.082402][ T4679] ? __rcu_read_unlock+0x4e/0x70 [ 69.082464][ T4679] ? __fget_files+0x184/0x1c0 [ 69.082485][ T4679] ? mutex_lock+0x57/0x90 [ 69.082514][ T4679] ksys_write+0xdc/0x1a0 [ 69.082544][ T4679] __x64_sys_write+0x40/0x50 [ 69.082638][ T4679] x64_sys_call+0x27e1/0x3020 [ 69.082680][ T4679] do_syscall_64+0x12c/0x3b0 [ 69.082710][ T4679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.082738][ T4679] RIP: 0033:0x7f98e996d60e [ 69.082758][ T4679] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 69.082862][ T4679] RSP: 002b:00007f98e8406fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 69.082886][ T4679] RAX: ffffffffffffffda RBX: 00007f98e84076c0 RCX: 00007f98e996d60e [ 69.082904][ T4679] RDX: 0000000000000001 RSI: 00007f98e84070a0 RDI: 0000000000000008 [ 69.082919][ T4679] RBP: 00007f98e8407090 R08: 0000000000000000 R09: 0000000000000000 [ 69.082943][ T4679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.082962][ T4679] R13: 00007f98e9c26038 R14: 00007f98e9c25fa0 R15: 00007ffd2cefbb88 [ 69.083052][ T4679] [ 69.090501][ T4682] netlink: 'syz.4.325': attribute type 1 has an invalid length. [ 69.096765][ T4651] serio: Serial port ttyS3 [ 69.191105][ T4682] loop4: detected capacity change from 0 to 512 [ 69.346158][ T4682] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.371916][ T4650] loop1: detected capacity change from 0 to 128 [ 69.403861][ T4682] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.325: Failed to acquire dquot type 1 [ 69.427818][ T4682] loop4: lost filesystem error report for type 5 error -5 [ 69.429361][ T4682] EXT4-fs (loop4): 1 truncate cleaned up [ 69.436576][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 69.436599][ C1] EXT4-fs (loop4): last error at time 1777424637: ext4_acquire_dquot:7034 [ 69.459059][ T4696] FAULT_INJECTION: forcing a failure. [ 69.459059][ T4696] name failslab, interval 1, probability 0, space 0, times 0 [ 69.508888][ T4682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 69.526901][ T4696] CPU: 1 UID: 0 PID: 4696 Comm: syz.3.328 Not tainted syzkaller #0 PREEMPT(full) [ 69.526933][ T4696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 69.526946][ T4696] Call Trace: [ 69.526973][ T4696] [ 69.526982][ T4696] __dump_stack+0x1d/0x30 [ 69.527006][ T4696] dump_stack_lvl+0x95/0xd0 [ 69.527027][ T4696] dump_stack+0x15/0x1b [ 69.527102][ T4696] should_fail_ex+0x263/0x280 [ 69.527176][ T4696] should_failslab+0x8c/0xb0 [ 69.527208][ T4696] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 69.527286][ T4696] ? __alloc_skb+0x2d6/0x690 [ 69.527319][ T4696] __alloc_skb+0x2d6/0x690 [ 69.527350][ T4696] ? __alloc_skb+0x200/0x690 [ 69.527447][ T4696] alloc_skb_with_frags+0x7e/0x3d0 [ 69.527488][ T4696] ? is_bpf_text_address+0x141/0x160 [ 69.527515][ T4696] ? kernel_text_address+0x94/0xb0 [ 69.527539][ T4696] sock_alloc_send_pskb+0x44d/0x500 [ 69.527643][ T4696] ? __rb_insert_augmented+0x76/0x2c0 [ 69.527678][ T4696] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 69.527761][ T4696] __ip_append_data+0x1817/0x23a0 [ 69.527837][ T4696] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 69.527898][ T4696] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 69.527985][ T4696] ? __list_del_entry_valid_or_report+0x65/0x130 [ 69.528089][ T4696] ? __rcu_read_unlock+0x4e/0x70 [ 69.528110][ T4696] ? ipv4_mtu+0x210/0x230 [ 69.528205][ T4696] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 69.528259][ T4696] ip_make_skb+0x150/0x2d0 [ 69.528293][ T4696] udp_sendmsg+0x1098/0x1500 [ 69.528349][ T4696] ? __pfx_udp_sendmsg+0x10/0x10 [ 69.528375][ T4696] inet_sendmsg+0xac/0xd0 [ 69.528433][ T4696] ? __pfx_inet_sendmsg+0x10/0x10 [ 69.528455][ T4696] ____sys_sendmsg+0x519/0x5b0 [ 69.528481][ T4696] ___sys_sendmsg+0x195/0x1e0 [ 69.528501][ T4696] ? path_openat+0x1b01/0x2050 [ 69.528542][ T4696] __sys_sendmmsg+0x185/0x320 [ 69.528600][ T4696] __x64_sys_sendmmsg+0x57/0x70 [ 69.528622][ T4696] x64_sys_call+0x27aa/0x3020 [ 69.528647][ T4696] do_syscall_64+0x12c/0x3b0 [ 69.528671][ T4696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.528762][ T4696] RIP: 0033:0x7f98e99acdd9 [ 69.528838][ T4696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.528856][ T4696] RSP: 002b:00007f98e8407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 69.528875][ T4696] RAX: ffffffffffffffda RBX: 00007f98e9c25fa0 RCX: 00007f98e99acdd9 [ 69.528938][ T4696] RDX: 0000000000000002 RSI: 0000200000002140 RDI: 0000000000000003 [ 69.528951][ T4696] RBP: 00007f98e8407090 R08: 0000000000000000 R09: 0000000000000000 [ 69.528963][ T4696] R10: 0000000004000800 R11: 0000000000000246 R12: 0000000000000001 [ 69.528976][ T4696] R13: 00007f98e9c26038 R14: 00007f98e9c25fa0 R15: 00007ffd2cefbb88 [ 69.528997][ T4696] [ 70.044320][ T4705] loop1: detected capacity change from 0 to 1024 [ 70.055853][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 70.074268][ T4710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49168 sclass=netlink_route_socket pid=4710 comm=syz.3.334 [ 70.084507][ T4705] EXT4-fs: Ignoring removed bh option [ 70.110952][ T4705] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 70.142052][ T4705] EXT4-fs (loop1): orphan cleanup on readonly fs [ 70.163412][ T4705] EXT4-fs error (device loop1): ext4_quota_enable:7221: comm syz.1.330: Bad quota inum: 4294934528, type: 0 [ 70.191764][ T4705] loop1: lost filesystem error report for type 5 error -117 [ 70.191918][ T4705] EXT4-fs (loop1): Remounting filesystem read-only [ 70.211758][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 70.218249][ C0] EXT4-fs (loop1): initial error at time 1777424637: ext4_quota_enable:7221 [ 70.226992][ C0] EXT4-fs (loop1): last error at time 1777424637: ext4_quota_enable:7221 [ 70.235779][ T4705] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 70.253350][ T4712] loop3: detected capacity change from 0 to 256 [ 70.261341][ T4705] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 70.268694][ T4705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.282438][ T4710] loop3: detected capacity change from 0 to 128 [ 70.391251][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'. [ 70.438422][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.550334][ T4729] FAULT_INJECTION: forcing a failure. [ 70.550334][ T4729] name failslab, interval 1, probability 0, space 0, times 0 [ 70.583388][ T4729] CPU: 0 UID: 0 PID: 4729 Comm: syz.3.338 Not tainted syzkaller #0 PREEMPT(full) [ 70.583418][ T4729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 70.583432][ T4729] Call Trace: [ 70.583439][ T4729] [ 70.583446][ T4729] __dump_stack+0x1d/0x30 [ 70.583475][ T4729] dump_stack_lvl+0x95/0xd0 [ 70.583525][ T4729] dump_stack+0x15/0x1b [ 70.583558][ T4729] should_fail_ex+0x263/0x280 [ 70.583595][ T4729] should_failslab+0x8c/0xb0 [ 70.583631][ T4729] kmem_cache_alloc_noprof+0x66/0x3f0 [ 70.583687][ T4729] ? security_inode_alloc+0x37/0x100 [ 70.583788][ T4729] security_inode_alloc+0x37/0x100 [ 70.583820][ T4729] inode_init_always_gfp+0x4a0/0x4e0 [ 70.583857][ T4729] ? __pfx_mqueue_fill_super+0x10/0x10 [ 70.583888][ T4729] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 70.583964][ T4729] alloc_inode+0x58/0x170 [ 70.584009][ T4729] new_inode+0x1d/0xe0 [ 70.584028][ T4729] ? __pfx_mqueue_fill_super+0x10/0x10 [ 70.584058][ T4729] mqueue_fill_super+0x89/0x1d0 [ 70.584129][ T4729] ? __pfx_mqueue_fill_super+0x10/0x10 [ 70.584183][ T4729] get_tree_nodev+0x83/0x100 [ 70.584233][ T4729] mqueue_get_tree+0x5d/0x80 [ 70.584261][ T4729] vfs_get_tree+0x57/0x1d0 [ 70.584378][ T4729] fc_mount_longterm+0x18/0xb0 [ 70.584405][ T4729] mq_init_ns+0x2db/0x370 [ 70.584448][ T4729] copy_ipcs+0x26e/0x460 [ 70.584478][ T4729] create_new_namespaces+0x12a/0x440 [ 70.584510][ T4729] unshare_nsproxy_namespaces+0x115/0x150 [ 70.584572][ T4729] ksys_unshare+0x402/0x740 [ 70.584599][ T4729] ? ksys_write+0x194/0x1a0 [ 70.584630][ T4729] __x64_sys_unshare+0x1f/0x30 [ 70.584700][ T4729] x64_sys_call+0x1cef/0x3020 [ 70.584768][ T4729] do_syscall_64+0x12c/0x3b0 [ 70.584791][ T4729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.584814][ T4729] RIP: 0033:0x7f98e99acdd9 [ 70.584901][ T4729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.584920][ T4729] RSP: 002b:00007f98e8407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 70.584939][ T4729] RAX: ffffffffffffffda RBX: 00007f98e9c25fa0 RCX: 00007f98e99acdd9 [ 70.584954][ T4729] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 70.584989][ T4729] RBP: 00007f98e8407090 R08: 0000000000000000 R09: 0000000000000000 [ 70.585002][ T4729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.585013][ T4729] R13: 00007f98e9c26038 R14: 00007f98e9c25fa0 R15: 00007ffd2cefbb88 [ 70.585032][ T4729] [ 70.592824][ T4726] syzkaller0: entered promiscuous mode [ 70.628195][ T4731] netlink: 'syz.4.339': attribute type 10 has an invalid length. [ 70.703924][ T4733] loop2: detected capacity change from 0 to 2048 [ 70.884158][ T4733] EXT4-fs error (device loop2): __ext4_fill_super:5596: inode #2: comm syz.2.340: inode has both inline data and extents flags [ 70.899478][ T4731] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 70.946668][ T4733] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 70.946835][ T4733] EXT4-fs (loop2): get root inode failed [ 70.955997][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 70.956022][ C0] EXT4-fs (loop2): initial error at time 1777424638: __ext4_fill_super:5596: inode 2 [ 70.956060][ C0] EXT4-fs (loop2): last error at time 1777424638: __ext4_fill_super:5596: inode 2 [ 71.007422][ T4733] EXT4-fs (loop2): mount failed [ 71.020832][ T4731] netlink: 40 bytes leftover after parsing attributes in process `syz.4.339'. [ 71.032836][ T4738] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 71.060004][ T4740] EXT4-fs (loop0): Invalid log cluster size: 31 [ 71.071901][ T4743] netlink: 'syz.4.343': attribute type 1 has an invalid length. [ 71.084901][ T4738] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 71.101989][ T4740] tmpfs: Unknown parameter 'siz˙' [ 71.114650][ T4738] EXT4-fs (loop3): 1 truncate cleaned up [ 71.148030][ T4748] netlink: 'syz.0.345': attribute type 1 has an invalid length. [ 71.162543][ T4738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.177247][ T4748] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.205748][ T4748] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.345: Failed to acquire dquot type 1 [ 71.206172][ T4743] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.222864][ T4748] loop0: lost filesystem error report for type 5 error -5 [ 71.231966][ T4738] netlink: 'syz.3.341': attribute type 11 has an invalid length. [ 71.250377][ T4748] EXT4-fs (loop0): 1 truncate cleaned up [ 71.268385][ T4755] can0: slcan on ptm0. [ 71.282283][ T4748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 71.299260][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.324705][ T4743] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.343: Failed to acquire dquot type 1 [ 71.344707][ T4743] loop4: lost filesystem error report for type 5 error -5 [ 71.345270][ T4743] EXT4-fs (loop4): 1 truncate cleaned up [ 71.364381][ T4743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 71.399897][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 71.453030][ T4770] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 71.610179][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 71.623146][ T4793] netlink: 'syz.3.353': attribute type 10 has an invalid length. [ 71.644782][ T4793] team0: Device ipvlan1 failed to register rx_handler [ 71.787188][ T4796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.799508][ T4796] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.847896][ T4793] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 71.912770][ T4801] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 72.122788][ T4754] can0 (unregistered): slcan off ptm0. [ 72.668722][ T4793] netlink: 40 bytes leftover after parsing attributes in process `syz.3.353'. [ 72.856685][ T4814] process 'syz.4.356' launched './file0' with NULL argv: empty string added [ 72.874796][ T28] kauditd_printk_skb: 8014 callbacks suppressed [ 72.874809][ T28] audit: type=1400 audit(1777424640.638:8682): avc: denied { execute_no_trans } for pid=4812 comm="syz.4.356" path="/63/file0" dev="tmpfs" ino=361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.957997][ T4814] Quota error (device loop4): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 73.016688][ T4814] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 73.071895][ T4814] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.356: Failed to acquire dquot type 1 [ 73.094034][ T4821] bridge1: entered promiscuous mode [ 73.110605][ T4821] bridge1: entered allmulticast mode [ 73.119278][ T4814] loop4: lost filesystem error report for type 5 error -117 [ 73.119905][ T4814] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.356: corrupted inode contents [ 73.127340][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 73.127355][ C1] EXT4-fs (loop4): initial error at time 1777424640: ext4_acquire_dquot:7034 [ 73.127387][ C1] EXT4-fs (loop4): last error at time 1777424640: ext4_acquire_dquot:7034 [ 73.214487][ T4814] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 73.215864][ T4814] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.356: mark_inode_dirty error [ 73.239005][ T4826] tipc: Started in network mode [ 73.311934][ T4826] tipc: Node identity ac1414aa, cluster identity 4711 [ 73.331846][ T4814] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 73.332096][ T4814] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.356: corrupted inode contents [ 73.357955][ T4826] tipc: Enabled bearer , priority 10 [ 73.433399][ T4814] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 73.443591][ T4814] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.356: mark_inode_dirty error [ 73.467417][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.479465][ T4814] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 73.488657][ T4814] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.356: corrupted inode contents [ 73.525874][ T4814] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 73.526024][ T4814] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 73.544026][ T4814] loop4: lost filesystem error report for type 5 error -117 [ 73.545545][ T4814] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.356: corrupted inode contents [ 73.571809][ T4814] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 73.572023][ T4814] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.356: mark_inode_dirty error [ 73.621524][ T4814] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 73.622562][ T4814] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 73.673319][ T4847] set_capacity_and_notify: 9 callbacks suppressed [ 73.673335][ T4847] loop0: detected capacity change from 0 to 4096 [ 73.691816][ T4814] loop4: lost filesystem error report for type 5 error -117 [ 73.696177][ T4814] EXT4-fs (loop4): 1 truncate cleaned up [ 73.714977][ T28] audit: type=1400 audit(1777424641.478:8683): avc: denied { mounton } for pid=4845 comm="syz.0.363" path="/63/file0" dev="tmpfs" ino=369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 73.722851][ T4814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.774400][ T4847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.779387][ T4814] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.799498][ T4860] netlink: 'syz.2.365': attribute type 10 has an invalid length. [ 73.808916][ T4847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.813982][ T4863] loop3: detected capacity change from 0 to 512 [ 73.826451][ T4860] ipvlan1: entered allmulticast mode [ 73.834150][ T4814] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.844750][ T4860] veth0_vlan: entered allmulticast mode [ 73.858025][ T4864] loop2: detected capacity change from 0 to 164 [ 73.866045][ T4814] FAULT_INJECTION: forcing a failure. [ 73.866045][ T4814] name failslab, interval 1, probability 0, space 0, times 0 [ 73.883010][ T4814] CPU: 1 UID: 0 PID: 4814 Comm: syz.4.356 Not tainted syzkaller #0 PREEMPT(full) [ 73.883044][ T4814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 73.883059][ T4814] Call Trace: [ 73.883068][ T4814] [ 73.883077][ T4814] __dump_stack+0x1d/0x30 [ 73.883143][ T4814] dump_stack_lvl+0x95/0xd0 [ 73.883170][ T4814] dump_stack+0x15/0x1b [ 73.883195][ T4814] should_fail_ex+0x263/0x280 [ 73.883231][ T4814] should_failslab+0x8c/0xb0 [ 73.883300][ T4814] kmem_cache_alloc_noprof+0x66/0x3f0 [ 73.883342][ T4814] ? alloc_empty_file+0x70/0x1e0 [ 73.883382][ T4814] alloc_empty_file+0x70/0x1e0 [ 73.883409][ T4814] path_openat+0x65/0x2050 [ 73.883446][ T4814] ? terminate_walk+0x1e6/0x210 [ 73.883498][ T4814] ? path_openat+0x1ab2/0x2050 [ 73.883568][ T4814] ? path_openat+0x1b01/0x2050 [ 73.883596][ T4814] ? _parse_integer_limit+0x170/0x190 [ 73.883622][ T4814] do_file_open+0x16c/0x290 [ 73.883658][ T4814] do_open_execat+0xab/0x240 [ 73.883753][ T4814] alloc_bprm+0x25/0x350 [ 73.883780][ T4814] do_execveat_common+0x104/0x720 [ 73.883810][ T4814] ? do_getname+0x102/0x1c0 [ 73.883829][ T4814] __x64_sys_execveat+0x76/0xa0 [ 73.883921][ T4814] x64_sys_call+0x2a33/0x3020 [ 73.884027][ T4814] do_syscall_64+0x12c/0x3b0 [ 73.884053][ T4814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.884087][ T4814] RIP: 0033:0x7f150497cdd9 [ 73.884102][ T4814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.884198][ T4814] RSP: 002b:00007f15033d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 73.884217][ T4814] RAX: ffffffffffffffda RBX: 00007f1504bf5fa0 RCX: 00007f150497cdd9 [ 73.884230][ T4814] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 73.884243][ T4814] RBP: 00007f15033d7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.884287][ T4814] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 73.884300][ T4814] R13: 00007f1504bf6038 R14: 00007f1504bf5fa0 R15: 00007ffeae7baeb8 [ 73.884320][ T4814] [ 73.946996][ T4863] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.366: inode has both inline data and extents flags [ 74.043567][ T4860] team0: Device ipvlan1 failed to register rx_handler [ 74.071473][ T4864] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 74.071547][ T4863] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.071951][ T4863] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.366: couldn't read orphan inode 15 (err -117) [ 74.087738][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 74.087753][ C0] EXT4-fs (loop3): initial error at time 1777424641: ext4_orphan_get:1397: inode 15 [ 74.087776][ C0] EXT4-fs (loop3): last error at time 1777424641: ext4_orphan_get:1397: inode 15 [ 74.181295][ T4863] loop3: lost filesystem error report for type 5 error -117 [ 74.182517][ T4863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.217804][ T4872] netlink: 'syz.4.367': attribute type 29 has an invalid length. [ 74.228187][ T4872] netlink: 'syz.4.367': attribute type 29 has an invalid length. [ 74.253575][ T4860] netlink: 40 bytes leftover after parsing attributes in process `syz.2.365'. [ 74.321781][ T28] audit: type=1400 audit(1777424642.078:8684): avc: denied { setattr } for pid=4862 comm="syz.3.366" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.341890][ T4877] can0: slcan on ptm0. [ 74.362739][ T35] tipc: Node number set to 2886997162 [ 74.370908][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.436686][ T4894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.370'. [ 74.479350][ T4894] loop3: detected capacity change from 0 to 764 [ 74.594254][ T28] audit: type=1400 audit(1777424642.228:8685): avc: denied { bind } for pid=4888 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.627852][ T28] audit: type=1400 audit(1777424642.228:8686): avc: denied { setopt } for pid=4887 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.832938][ T4912] loop1: detected capacity change from 0 to 512 [ 74.933812][ T4912] EXT4-fs (loop1): 1 orphan inode deleted [ 74.941608][ T4912] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.954425][ T4912] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.971055][ T4912] netlink: 'syz.1.375': attribute type 10 has an invalid length. [ 74.978925][ T4912] team0: Device veth0_macvtap is up. Set it down before adding it as a team port [ 74.990345][ T35] IPVS: starting estimator thread 0... [ 75.081854][ T4915] IPVS: using max 2304 ests per chain, 115200 per kthread [ 75.204747][ T4921] loop3: detected capacity change from 0 to 512 [ 75.235999][ T4875] can0 (unregistered): slcan off ptm0. [ 75.367325][ T4921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 75.429563][ T4921] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.471491][ T4927] netlink: 'syz.2.379': attribute type 29 has an invalid length. [ 75.618718][ T346] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 75.630747][ T346] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 75.648275][ T4931] netlink: 'syz.2.379': attribute type 29 has an invalid length. [ 76.348421][ T4933] capability: warning: `syz.3.378' uses deprecated v2 capabilities in a way that may be insecure [ 76.416715][ T28] audit: type=1400 audit(1777424644.168:8687): avc: denied { write } for pid=4920 comm="syz.3.378" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 76.472825][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.707942][ T4936] loop2: detected capacity change from 0 to 512 [ 76.735435][ T4936] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.761195][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 76.777213][ T4936] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.381: inode has both inline data and extents flags [ 76.800895][ T4936] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.801004][ T4936] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.381: couldn't read orphan inode 15 (err -117) [ 76.810200][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 76.810216][ C0] EXT4-fs (loop2): initial error at time 1777424644: ext4_orphan_get:1397: inode 15 [ 76.810249][ C0] EXT4-fs (loop2): last error at time 1777424644: ext4_orphan_get:1397: inode 15 [ 76.847114][ T4936] loop2: lost filesystem error report for type 5 error -117 [ 76.848856][ T4936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.892321][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.914940][ T4952] netlink: 'syz.3.383': attribute type 10 has an invalid length. [ 76.926982][ T4952] team0: Device ipvlan1 failed to register rx_handler [ 76.937761][ T4952] loop3: detected capacity change from 0 to 164 [ 76.960121][ T4952] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 77.022537][ T4937] netlink: 16 bytes leftover after parsing attributes in process `syz.0.374'. [ 77.053061][ T4937] netlink: 'syz.0.374': attribute type 10 has an invalid length. [ 77.082400][ T4952] netlink: 40 bytes leftover after parsing attributes in process `syz.3.383'. [ 78.037148][ T4937] vlan2: entered promiscuous mode [ 78.067782][ T4937] bridge0: port 1(vlan2) entered blocking state [ 78.101704][ T4937] bridge0: port 1(vlan2) entered disabled state [ 78.133044][ T4937] vlan2: entered allmulticast mode [ 78.152834][ T4937] bridge0: entered allmulticast mode [ 78.725348][ T4972] loop1: detected capacity change from 0 to 4096 [ 78.780280][ T4972] EXT4-fs: inline encryption not supported [ 78.788584][ T4972] EXT4-fs: test_dummy_encryption option not supported [ 78.798810][ T4981] slcan: can't register candev [ 78.813038][ T4937] vlan2: left allmulticast mode [ 78.818022][ T4937] bridge0: left allmulticast mode [ 78.886209][ T5014] netlink: 'syz.3.395': attribute type 3 has an invalid length. [ 78.893890][ T5014] netlink: 32 bytes leftover after parsing attributes in process `syz.3.395'. [ 78.916105][ T5016] loop4: detected capacity change from 0 to 512 [ 78.934024][ T5016] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.4.396: corrupted xattr block 95: invalid header [ 78.948037][ T5016] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 78.948494][ T5016] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 78.957819][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 78.957857][ C0] EXT4-fs (loop4): initial error at time 1777424646: ext4_expand_extra_isize_ea:2810: inode 11 [ 78.957936][ C0] EXT4-fs (loop4): last error at time 1777424646: ext4_expand_extra_isize_ea:2810: inode 11 [ 78.972201][ T28] audit: type=1400 audit(1777424646.728:8688): avc: denied { ioctl } for pid=5020 comm="syz.3.397" path="socket:[9453]" dev="sockfs" ino=9453 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.014693][ T5016] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.396: bg 0: block 7: invalid block bitmap [ 79.035933][ T5016] loop4: lost filesystem error report for type 5 error -117 [ 79.036967][ T5016] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 79.053653][ T5016] loop4: lost filesystem error report for type 5 error -117 [ 79.053959][ T5016] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #11: comm syz.4.396: corrupted xattr block 95: invalid header [ 79.079830][ T5016] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 79.080172][ T5016] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 79.089603][ T5021] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 79.128722][ T5016] EXT4-fs (loop4): 1 orphan inode deleted [ 79.144930][ T5016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.198898][ T5026] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 79.209156][ T5016] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 79.222501][ T5028] netlink: 'syz.0.399': attribute type 10 has an invalid length. [ 79.230352][ T5028] ipvlan1: entered allmulticast mode [ 79.233972][ T5016] audit: out of memory in audit_log_start [ 79.253615][ T5028] veth0_vlan: entered allmulticast mode [ 79.255229][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.274041][ T28] audit: type=1326 audit(1777424647.028:8689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5025 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b58fcdd9 code=0x7ffc0000 [ 79.333546][ T5028] loop0: detected capacity change from 0 to 164 [ 79.353133][ T28] audit: type=1326 audit(1777424647.028:8690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5025 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b58fcdd9 code=0x7ffc0000 [ 79.391545][ T28] audit: type=1326 audit(1777424647.028:8691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5025 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b58fcdd9 code=0x7ffc0000 [ 79.428320][ T5028] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 79.437941][ T5031] loop1: detected capacity change from 0 to 128 [ 79.444756][ T28] audit: type=1326 audit(1777424647.028:8692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5025 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f33b58fcdd9 code=0x7ffc0000 [ 79.499122][ T5040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'. [ 79.506629][ T28] audit: type=1326 audit(1777424647.028:8693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f33b58bd60e code=0x7ffc0000 [ 79.531218][ T28] audit: type=1400 audit(1777424647.078:8695): avc: denied { cpu } for pid=5035 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 79.550271][ T28] audit: type=1326 audit(1777424647.028:8694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5025 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b58fcdd9 code=0x7ffc0000 [ 79.690186][ T5028] netlink: 40 bytes leftover after parsing attributes in process `syz.0.399'. [ 79.734221][ T5051] loop4: detected capacity change from 0 to 1024 [ 79.772625][ T5058] can0: slcan on ptm0. [ 79.798039][ T5051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 79.819922][ T5051] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.841515][ T5062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.412'. [ 79.843899][ T5051] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.407: lblock 3 mapped to illegal pblock 3 (length 1) [ 79.865216][ T5051] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 79.865263][ T5051] EXT4-fs (loop4): This should not happen!! Data will be lost [ 79.865263][ T5051] [ 79.942584][ T5076] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: block 3: comm syz.4.407: lblock 3 mapped to illegal pblock 3 (length 1) [ 79.963971][ T5055] loop1: detected capacity change from 0 to 128 [ 80.041756][ T5055] syz.1.409: attempt to access beyond end of device [ 80.041756][ T5055] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 80.060376][ T5055] syz.1.409: attempt to access beyond end of device [ 80.060376][ T5055] loop1: rw=0, sector=150, nr_sectors = 1 limit=128 [ 80.078258][ T5054] syz.1.409: attempt to access beyond end of device [ 80.078258][ T5054] loop1: rw=524288, sector=153, nr_sectors = 216 limit=128 [ 80.095421][ T5055] syz.1.409: attempt to access beyond end of device [ 80.095421][ T5055] loop1: rw=0, sector=145, nr_sectors = 1 limit=128 [ 80.108711][ T5055] Buffer I/O error on dev loop1, logical block 145, async page read [ 80.115703][ T5093] loop0: detected capacity change from 0 to 512 [ 80.117212][ T5055] syz.1.409: attempt to access beyond end of device [ 80.117212][ T5055] loop1: rw=0, sector=146, nr_sectors = 1 limit=128 [ 80.138345][ T5055] Buffer I/O error on dev loop1, logical block 146, async page read [ 80.146644][ T5055] syz.1.409: attempt to access beyond end of device [ 80.146644][ T5055] loop1: rw=0, sector=147, nr_sectors = 1 limit=128 [ 80.160051][ T5055] Buffer I/O error on dev loop1, logical block 147, async page read [ 80.168209][ T5055] syz.1.409: attempt to access beyond end of device [ 80.168209][ T5055] loop1: rw=0, sector=148, nr_sectors = 1 limit=128 [ 80.181376][ T5055] Buffer I/O error on dev loop1, logical block 148, async page read [ 80.199607][ T5055] syz.1.409: attempt to access beyond end of device [ 80.199607][ T5055] loop1: rw=0, sector=149, nr_sectors = 1 limit=128 [ 80.214020][ T5055] Buffer I/O error on dev loop1, logical block 149, async page read [ 80.222320][ T5055] syz.1.409: attempt to access beyond end of device [ 80.222320][ T5055] loop1: rw=0, sector=150, nr_sectors = 1 limit=128 [ 80.235746][ T5055] Buffer I/O error on dev loop1, logical block 150, async page read [ 80.255665][ T5055] syz.1.409: attempt to access beyond end of device [ 80.255665][ T5055] loop1: rw=0, sector=151, nr_sectors = 1 limit=128 [ 80.276314][ T5093] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.287046][ T5055] Buffer I/O error on dev loop1, logical block 151, async page read [ 80.297068][ T5055] Buffer I/O error on dev loop1, logical block 152, async page read [ 80.324434][ T5093] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 80.339815][ T5055] Buffer I/O error on dev loop1, logical block 145, async page read [ 80.348196][ T5055] Buffer I/O error on dev loop1, logical block 146, async page read [ 80.442616][ T5093] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.415: bg 0: block 248: padding at end of block bitmap is not set [ 80.463138][ T5093] loop0: lost filesystem error report for type 5 error -117 [ 80.471749][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 80.485566][ C1] EXT4-fs (loop0): last error at time 1777424648: ext4_validate_block_bitmap:441 [ 80.498994][ T5093] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.415: Failed to acquire dquot type 1 [ 80.532001][ T5093] loop0: lost filesystem error report for type 5 error -28 [ 80.536782][ T5076] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.407: bg 0: block 112: padding at end of block bitmap is not set [ 80.559062][ T5102] Illegal XDP return value 123 on prog (id 91) dev syz_tun, expect packet loss! [ 80.559616][ T5076] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 2048 with error 28 [ 80.581209][ T5093] EXT4-fs (loop0): 1 truncate cleaned up [ 80.582319][ T5076] EXT4-fs (loop4): This should not happen!! Data will be lost [ 80.582319][ T5076] [ 80.596801][ T5076] EXT4-fs (loop4): Total free blocks count 0 [ 80.602928][ T5076] EXT4-fs (loop4): Free/Dirty block details [ 80.609118][ T5076] EXT4-fs (loop4): free_blocks=0 [ 80.614201][ T5076] EXT4-fs (loop4): dirty_blocks=7664 [ 80.619572][ T5076] EXT4-fs (loop4): Block reservation details [ 80.627235][ T5093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 80.653935][ T5093] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.415: Failed to acquire dquot type 1 [ 80.696209][ T5093] tmpfs: Unknown parameter 'siz˙' [ 80.713725][ T3294] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 80.783973][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 80.793492][ T5056] can0 (unregistered): slcan off ptm0. [ 80.826053][ T5118] FAULT_INJECTION: forcing a failure. [ 80.826053][ T5118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.826094][ T5116] rdma_rxe: Failed to create IPv6 UDP tunnel [ 80.863603][ T5118] CPU: 1 UID: 0 PID: 5118 Comm: syz.4.418 Not tainted syzkaller #0 PREEMPT(full) [ 80.863639][ T5118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 80.863716][ T5118] Call Trace: [ 80.863723][ T5118] [ 80.863730][ T5118] __dump_stack+0x1d/0x30 [ 80.863754][ T5118] dump_stack_lvl+0x95/0xd0 [ 80.863851][ T5118] dump_stack+0x15/0x1b [ 80.863869][ T5118] should_fail_ex+0x263/0x280 [ 80.863898][ T5118] should_fail+0xb/0x20 [ 80.863932][ T5118] should_fail_usercopy+0x1a/0x20 [ 80.864055][ T5118] _copy_to_user+0x20/0xa0 [ 80.864086][ T5118] simple_read_from_buffer+0xb5/0x130 [ 80.864120][ T5118] proc_fail_nth_read+0x10e/0x150 [ 80.864169][ T5118] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 80.864196][ T5118] vfs_read+0x1ab/0x7f0 [ 80.864222][ T5118] ? __rcu_read_unlock+0x4e/0x70 [ 80.864243][ T5118] ? __fget_files+0x184/0x1c0 [ 80.864312][ T5118] ? mutex_lock+0x57/0x90 [ 80.864343][ T5118] ksys_read+0xdc/0x1a0 [ 80.864374][ T5118] __x64_sys_read+0x40/0x50 [ 80.864400][ T5118] x64_sys_call+0x2886/0x3020 [ 80.864488][ T5118] do_syscall_64+0x12c/0x3b0 [ 80.864526][ T5118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.864547][ T5118] RIP: 0033:0x7f150493d60e [ 80.864562][ T5118] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 80.864607][ T5118] RSP: 002b:00007f15033d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.864633][ T5118] RAX: ffffffffffffffda RBX: 00007f15033d76c0 RCX: 00007f150493d60e [ 80.864647][ T5118] RDX: 000000000000000f RSI: 00007f15033d70a0 RDI: 0000000000000006 [ 80.864659][ T5118] RBP: 00007f15033d7090 R08: 0000000000000000 R09: 0000000000000000 [ 80.864671][ T5118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.864709][ T5118] R13: 00007f1504bf6038 R14: 00007f1504bf5fa0 R15: 00007ffeae7baeb8 [ 80.864728][ T5118] [ 81.127702][ T5124] netlink: 'syz.0.421': attribute type 10 has an invalid length. [ 81.139370][ T5124] loop0: detected capacity change from 0 to 164 [ 81.151279][ T5124] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 81.215341][ T5124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.421'. [ 81.254278][ T5135] rdma_rxe: Failed to create IPv4 UDP tunnel [ 81.268184][ T5131] loop4: detected capacity change from 0 to 512 [ 81.306682][ T5131] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.353413][ T5131] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.423: Failed to acquire dquot type 1 [ 81.380513][ T5131] loop4: lost filesystem error report for type 5 error -5 [ 81.381751][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 81.395402][ C1] EXT4-fs (loop4): last error at time 1777424649: ext4_acquire_dquot:7034 [ 81.430680][ T5131] EXT4-fs (loop4): 1 truncate cleaned up [ 81.445658][ T5131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 81.487500][ T5159] loop2: detected capacity change from 0 to 128 [ 81.507073][ T5162] FAULT_INJECTION: forcing a failure. [ 81.507073][ T5162] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 81.525736][ T5162] CPU: 1 UID: 0 PID: 5162 Comm: syz.3.429 Not tainted syzkaller #0 PREEMPT(full) [ 81.525768][ T5162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 81.525811][ T5162] Call Trace: [ 81.525817][ T5162] [ 81.525824][ T5162] __dump_stack+0x1d/0x30 [ 81.525847][ T5162] dump_stack_lvl+0x95/0xd0 [ 81.525871][ T5162] dump_stack+0x15/0x1b [ 81.525939][ T5162] should_fail_ex+0x263/0x280 [ 81.525971][ T5162] should_fail_alloc_page+0xf2/0x100 [ 81.526044][ T5162] __alloc_frozen_pages_noprof+0x108/0x350 [ 81.526078][ T5162] alloc_pages_mpol+0xb3/0x260 [ 81.526108][ T5162] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 81.526134][ T5162] handle_mm_fault+0x103e/0x2e70 [ 81.526213][ T5162] do_user_addr_fault+0x3fd/0x1050 [ 81.526250][ T5162] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 81.526303][ T5162] exc_page_fault+0x62/0xa0 [ 81.526408][ T5162] asm_exc_page_fault+0x26/0x30 [ 81.526431][ T5162] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 81.526498][ T5162] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 1e 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 81.526519][ T5162] RSP: 0018:ffffc900027afcf0 EFLAGS: 00050216 [ 81.526572][ T5162] RAX: 0000000000000013 RBX: 0000000000000030 RCX: 0000000000000030 [ 81.526587][ T5162] RDX: 0000000000000000 RSI: ffffc900027afdc0 RDI: 0000200000001500 [ 81.526604][ T5162] RBP: ffff888101cdaa50 R08: 000000000000004c R09: 0000000000000000 [ 81.526689][ T5162] R10: 0001c900027afdc0 R11: 0001c900027afdef R12: 0000200000001530 [ 81.526706][ T5162] R13: 00007ffffffff000 R14: 0000200000001500 R15: ffffc900027afdc0 [ 81.526731][ T5162] _copy_to_user+0x7c/0xa0 [ 81.526849][ T5162] copy_siginfo_to_user+0x22/0xb0 [ 81.526888][ T5162] ptrace_request+0x1661/0x1a90 [ 81.526921][ T5162] arch_ptrace+0x289/0x3f0 [ 81.526957][ T5162] __se_sys_ptrace+0xf3/0x2c0 [ 81.527020][ T5162] __x64_sys_ptrace+0x55/0x70 [ 81.527040][ T5162] x64_sys_call+0x287b/0x3020 [ 81.527070][ T5162] do_syscall_64+0x12c/0x3b0 [ 81.527150][ T5162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.527257][ T5162] RIP: 0033:0x7f98e99acdd9 [ 81.527276][ T5162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.527298][ T5162] RSP: 002b:00007f98e83e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 81.527401][ T5162] RAX: ffffffffffffffda RBX: 00007f98e9c26090 RCX: 00007f98e99acdd9 [ 81.527420][ T5162] RDX: 0000200000000140 RSI: 0000000000000116 RDI: 0000000000004209 [ 81.527436][ T5162] RBP: 00007f98e83e6090 R08: 0000000000000000 R09: 0000000000000000 [ 81.527451][ T5162] R10: 0000200000001500 R11: 0000000000000246 R12: 0000000000000001 [ 81.527467][ T5162] R13: 00007f98e9c26128 R14: 00007f98e9c26090 R15: 00007ffd2cefbb88 [ 81.527534][ T5162] [ 81.847744][ T5177] sit1: entered promiscuous mode [ 81.906999][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 81.972319][ T5183] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 82.009354][ T5190] netlink: 'syz.4.434': attribute type 10 has an invalid length. [ 82.027712][ T5189] can0: slcan on ptm0. [ 82.057876][ T5192] FAULT_INJECTION: forcing a failure. [ 82.057876][ T5192] name failslab, interval 1, probability 0, space 0, times 0 [ 82.074626][ T5192] CPU: 1 UID: 0 PID: 5192 Comm: syz.1.436 Not tainted syzkaller #0 PREEMPT(full) [ 82.074691][ T5192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 82.074702][ T5192] Call Trace: [ 82.074709][ T5192] [ 82.074718][ T5192] __dump_stack+0x1d/0x30 [ 82.074747][ T5192] dump_stack_lvl+0x95/0xd0 [ 82.074791][ T5192] dump_stack+0x15/0x1b [ 82.074815][ T5192] should_fail_ex+0x263/0x280 [ 82.074879][ T5192] should_failslab+0x8c/0xb0 [ 82.074949][ T5192] kmem_cache_alloc_noprof+0x66/0x3f0 [ 82.074991][ T5192] ? xfrm_state_alloc+0x2c/0x190 [ 82.075022][ T5192] xfrm_state_alloc+0x2c/0x190 [ 82.075048][ T5192] xfrm_add_sa+0xf4e/0x25d0 [ 82.075169][ T5192] xfrm_user_rcv_msg+0x576/0x670 [ 82.075270][ T5192] ? __kfree_skb+0x109/0x150 [ 82.075316][ T5192] ? nlmon_xmit+0x4f/0x60 [ 82.075416][ T5192] ? consume_skb+0x4b/0x130 [ 82.075461][ T5192] netlink_rcv_skb+0x123/0x220 [ 82.075551][ T5192] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 82.075600][ T5192] xfrm_netlink_rcv+0x48/0x60 [ 82.075634][ T5192] netlink_unicast+0x5a8/0x680 [ 82.075739][ T5192] netlink_sendmsg+0x5c8/0x6f0 [ 82.075838][ T5192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.075867][ T5192] ____sys_sendmsg+0x563/0x5b0 [ 82.076003][ T5192] ___sys_sendmsg+0x195/0x1e0 [ 82.076048][ T5192] __x64_sys_sendmsg+0xd4/0x160 [ 82.076082][ T5192] x64_sys_call+0x194c/0x3020 [ 82.076113][ T5192] do_syscall_64+0x12c/0x3b0 [ 82.076205][ T5192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.076229][ T5192] RIP: 0033:0x7f33b58fcdd9 [ 82.076273][ T5192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.076297][ T5192] RSP: 002b:00007f33b4357028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.076318][ T5192] RAX: ffffffffffffffda RBX: 00007f33b5b75fa0 RCX: 00007f33b58fcdd9 [ 82.076331][ T5192] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 82.076344][ T5192] RBP: 00007f33b4357090 R08: 0000000000000000 R09: 0000000000000000 [ 82.076431][ T5192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.076448][ T5192] R13: 00007f33b5b76038 R14: 00007f33b5b75fa0 R15: 00007ffc51df5cc8 [ 82.076474][ T5192] [ 82.086748][ T5190] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 82.322608][ T5201] netlink: 40 bytes leftover after parsing attributes in process `syz.4.434'. [ 82.455980][ T5220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.468556][ T5221] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 82.498017][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.537615][ T5227] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 82.817996][ T5253] netlink: 'syz.4.448': attribute type 1 has an invalid length. [ 82.860207][ T5253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.866966][ T5188] can0 (unregistered): slcan off ptm0. [ 82.887047][ T5253] bond1: (slave bond2): making interface the new active one [ 82.900844][ T5260] netlink: 'syz.3.449': attribute type 10 has an invalid length. [ 82.909124][ T5253] bond1: (slave bond2): Enslaving as an active interface with an up link [ 82.942642][ T5259] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 82.946030][ T5253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.448'. [ 82.983597][ T5265] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 83.016395][ T5253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.054139][ T5265] netlink: 40 bytes leftover after parsing attributes in process `syz.3.449'. [ 83.147423][ T5260] team0: Device ipvlan1 failed to register rx_handler [ 83.229105][ T5286] netlink: 240 bytes leftover after parsing attributes in process `syz.4.451'. [ 83.655769][ T5325] netlink: 'syz.4.464': attribute type 10 has an invalid length. [ 83.678868][ T5325] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 83.708328][ T5327] can0: slcan on ptm0. [ 83.767926][ T5325] netlink: 40 bytes leftover after parsing attributes in process `syz.4.464'. [ 83.953345][ T5339] set_capacity_and_notify: 6 callbacks suppressed [ 83.953387][ T5339] loop4: detected capacity change from 0 to 1024 [ 84.058120][ T5339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 84.072534][ T5339] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.084492][ T5339] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.466: lblock 3 mapped to illegal pblock 3 (length 1) [ 84.111140][ T5339] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 84.136754][ T5339] EXT4-fs (loop4): This should not happen!! Data will be lost [ 84.136754][ T5339] [ 84.211117][ T5339] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.466: Freeing blocks not in datazone - block = 3, count = 1 [ 84.472312][ T5361] netlink: 128 bytes leftover after parsing attributes in process `syz.2.469'. [ 84.490032][ T5361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 84.591527][ T5326] can0 (unregistered): slcan off ptm0. [ 84.707568][ T28] kauditd_printk_skb: 319 callbacks suppressed [ 84.707585][ T28] audit: type=1400 audit(1777424652.469:9009): avc: denied { sqpoll } for pid=5372 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 84.751360][ T5339] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.466: bg 0: block 112: padding at end of block bitmap is not set [ 84.769595][ T5339] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 2048 with error 28 [ 84.782759][ T5339] EXT4-fs (loop4): This should not happen!! Data will be lost [ 84.782759][ T5339] [ 84.805233][ T5339] EXT4-fs (loop4): Total free blocks count 0 [ 84.817586][ T5339] EXT4-fs (loop4): Free/Dirty block details [ 84.825880][ T5339] EXT4-fs (loop4): free_blocks=0 [ 84.836780][ T5339] EXT4-fs (loop4): dirty_blocks=6576 [ 84.842301][ T5339] EXT4-fs (loop4): Block reservation details [ 84.865157][ T5339] syz.4.466 (5339) used greatest stack depth: 7824 bytes left [ 84.963216][ T3294] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 85.009037][ T28] audit: type=1400 audit(1777424652.770:9010): avc: denied { append } for pid=5397 comm="syz.3.477" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 85.033585][ T5398] netlink: 44 bytes leftover after parsing attributes in process `syz.3.477'. [ 85.065737][ T5403] netlink: 'syz.4.476': attribute type 10 has an invalid length. [ 85.293443][ T5407] loop4: detected capacity change from 0 to 164 [ 85.309832][ T5409] FAULT_INJECTION: forcing a failure. [ 85.309832][ T5409] name failslab, interval 1, probability 0, space 0, times 0 [ 85.367257][ T5404] loop2: detected capacity change from 0 to 512 [ 85.394040][ T5403] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 85.423069][ T5409] CPU: 0 UID: 0 PID: 5409 Comm: syz.0.479 Not tainted syzkaller #0 PREEMPT(full) [ 85.423099][ T5409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 85.423184][ T5409] Call Trace: [ 85.423191][ T5409] [ 85.423207][ T5409] __dump_stack+0x1d/0x30 [ 85.423312][ T5409] dump_stack_lvl+0x95/0xd0 [ 85.423332][ T5409] dump_stack+0x15/0x1b [ 85.423355][ T5409] should_fail_ex+0x263/0x280 [ 85.423466][ T5409] should_failslab+0x8c/0xb0 [ 85.423496][ T5409] kmem_cache_alloc_noprof+0x66/0x3f0 [ 85.423554][ T5409] ? __anon_vma_prepare+0xcd/0x2f0 [ 85.423632][ T5409] __anon_vma_prepare+0xcd/0x2f0 [ 85.423662][ T5409] do_wp_page+0x1910/0x2040 [ 85.423802][ T5409] ? _raw_spin_lock+0x52/0xa0 [ 85.423835][ T5409] ? __rcu_read_lock+0x36/0x50 [ 85.423862][ T5409] handle_mm_fault+0x8b9/0x2e70 [ 85.423932][ T5409] ? vma_start_read+0x1c7/0x2c0 [ 85.423976][ T5409] do_user_addr_fault+0x62f/0x1050 [ 85.424056][ T5409] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 85.424081][ T5409] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 85.424109][ T5409] ? trace_page_fault_user+0x1f/0xa0 [ 85.424179][ T5409] exc_page_fault+0x62/0xa0 [ 85.424233][ T5409] asm_exc_page_fault+0x26/0x30 [ 85.424258][ T5409] RIP: 0033:0x7fbcc76c3e63 [ 85.424330][ T5409] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 85.424347][ T5409] RSP: 002b:00007fbcc625e470 EFLAGS: 00010202 [ 85.424368][ T5409] RAX: 0000000000000400 RBX: 00007fbcc625e530 RCX: 00007fbcbde3f000 [ 85.424385][ T5409] RDX: 00007fbcc625e6d0 RSI: 0000000000000059 RDI: 00007fbcc625e5d0 [ 85.424402][ T5409] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000b7 [ 85.424414][ T5409] R10: 00000000000000ca R11: 00007fbcc625e530 R12: 0000000000000001 [ 85.424437][ T5409] R13: 00007fbcc78c2900 R14: 0000000000000020 R15: 00007fbcc625e5d0 [ 85.424457][ T5409] [ 85.633449][ T5409] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 85.835260][ T5409] loop0: detected capacity change from 0 to 1024 [ 85.887719][ T5404] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.899956][ T5409] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 85.920944][ T5403] netlink: 40 bytes leftover after parsing attributes in process `syz.4.476'. [ 85.932762][ T5409] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 85.986326][ T5409] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 86.022435][ T5409] EXT4-fs (loop0): orphan cleanup on readonly fs [ 86.048423][ T5409] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm syz.0.479: Inode bitmap for bg 0 marked uninitialized [ 86.064074][ T5404] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 86.074803][ T5409] loop0: lost filesystem error report for type 5 error -117 [ 86.076172][ T5409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.098008][ T5404] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 86.109153][ T5404] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.478: Failed to acquire dquot type 1 [ 86.121454][ T5409] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.130733][ T5404] loop2: lost filesystem error report for type 5 error -5 [ 86.131332][ T5404] EXT4-fs (loop2): 1 truncate cleaned up [ 86.144150][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 86.144180][ C0] EXT4-fs (loop2): last error at time 1777424653: ext4_acquire_dquot:7034 [ 86.209858][ T2984] ================================================================== [ 86.217995][ T2984] BUG: KCSAN: data-race in ktime_get_coarse_real_ts64_mg / timekeeping_update_from_shadow [ 86.227951][ T2984] [ 86.230304][ T2984] write to 0xffffffff893a4488 of 304 bytes by interrupt on cpu 1: [ 86.238127][ T2984] timekeeping_update_from_shadow+0x40d/0x440 [ 86.244246][ T2984] __timekeeping_advance+0xa5d/0xc10 [ 86.249680][ T2984] update_wall_time+0x21/0x50 [ 86.254392][ T2984] tick_do_update_jiffies64+0x169/0x1c0 [ 86.260158][ T2984] tick_nohz_handler+0x8d/0x3d0 [ 86.265068][ T2984] __hrtimer_run_queues+0x276/0x4f0 [ 86.270339][ T2984] hrtimer_interrupt+0x261/0x850 [ 86.275312][ T2984] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 86.280458][ T5404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 86.281230][ T2984] sysvec_apic_timer_interrupt+0x6f/0x80 [ 86.299387][ T2984] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 86.305405][ T2984] __sanitizer_cov_trace_pc+0x45/0x70 [ 86.310805][ T2984] ___sys_recvmsg+0x2d6/0x3b0 [ 86.315510][ T2984] do_recvmmsg+0x1ef/0x560 [ 86.319980][ T2984] __x64_sys_recvmmsg+0xe5/0x170 [ 86.324939][ T2984] x64_sys_call+0x80f/0x3020 [ 86.329557][ T2984] do_syscall_64+0x12c/0x3b0 [ 86.334170][ T2984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.340085][ T2984] [ 86.342440][ T2984] read to 0xffffffff893a44f8 of 4 bytes by task 2984 on cpu 0: [ 86.349995][ T2984] ktime_get_coarse_real_ts64_mg+0x89/0x1a0 [ 86.355917][ T2984] current_time+0x41/0x240 [ 86.360355][ T2984] touch_atime+0x17b/0x330 [ 86.364797][ T2984] do_readlinkat+0x137/0x2f0 [ 86.369419][ T2984] __x64_sys_readlink+0x47/0x60 [ 86.374499][ T2984] x64_sys_call+0x2b51/0x3020 [ 86.379198][ T2984] do_syscall_64+0x12c/0x3b0 [ 86.383813][ T2984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.389728][ T2984] [ 86.392073][ T2984] value changed: 0x39db5eff -> 0x3a740907 [ 86.397826][ T2984] [ 86.400168][ T2984] Reported by Kernel Concurrency Sanitizer on: [ 86.406394][ T2984] CPU: 0 UID: 0 PID: 2984 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 86.415396][ T2984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 86.425471][ T2984] ================================================================== [ 86.543966][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.