last executing test programs: 30m19.677247242s ago: executing program 32 (id=1623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x44, 0xb, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}}, 0x0) 29m49.134460828s ago: executing program 33 (id=2129): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x90000005}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000340)={0x2, 0x6d0, 0x35, 0x7, 0x6, "b3ed7c8d3812aab5"}) 28m22.107710413s ago: executing program 34 (id=2987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000090) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 28m16.200907308s ago: executing program 35 (id=3024): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(0x0, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x200000) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x36, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r1) 27m38.65997242s ago: executing program 36 (id=3211): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff20010000000000000000000000000002ff0500000000000000000000000000014f194e20"], 0x9e) 26m49.529711336s ago: executing program 37 (id=3545): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1, 0x200}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x10, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) 26m8.982945056s ago: executing program 38 (id=3794): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x2}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000500)="88", 0x1}], 0x1}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000800)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)={0x3, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0xea60}, {}, 0x1, @can={{0x0, 0x1, 0x0, 0x1}, 0x6, 0x2, 0x0, 0x0, "79875209d9d220c1"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000054) write$P9_RSETATTR(r1, &(0x7f00000000c0)={0x7, 0x1b, 0x2}, 0xffac) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000400)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r7, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x8}}, 0x0, 0x0, 0x0, 0x4, 0x94}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0xcb, &(0x7f0000000000)={[{@cruft}, {@check_strict}, {@map_off}, {@showassoc}, {@utf8}, {@map_normal}]}, 0x1, 0x56e, &(0x7f0000000b00)="$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") fadvise64(r1, 0x2, 0x7, 0x5) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@report={0x54, 0x29, 0x1, 0x70bd2b, 0x25dfdbfe, {0x33, {@in=@rand_addr=0x64010102, @in6=@remote, 0x7ff, 0x6, 0x4e23, 0x0, 0x0, 0xb0, 0xa0, 0x90}}, [@iptfs_max_qsize={0x8, 0x28, 0xdc}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008815}, 0x4000) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}}}, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0x4, @empty, 0x6}}, 0x0, 0x9, 0xffff1896, 0x104, 0x25, 0x7fff, 0x9}, 0x9c) 26m6.00792882s ago: executing program 39 (id=3800): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xdf}, 0x266, 0x400000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x8f) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f0000000500)=ANY=[@ANYBLOB='-cpu'], 0x5) r5 = openat$cgroup_type(r2, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@map_fd={0x18, 0x0, 0x0}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 24m9.457928397s ago: executing program 4 (id=5018): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010340)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) 24m9.434653448s ago: executing program 4 (id=5020): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 24m9.418327809s ago: executing program 4 (id=5021): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200700, &(0x7f0000000500)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpquota}, {@nombcache}, {@nolazytime}, {@nobh}], [{@subj_type={'subj_type', 0x3d, 'y(-#*&#'}}, {@seclabel}, {@fowner_lt}]}, 0x0, 0x478, &(0x7f00000014c0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)) 24m9.382859619s ago: executing program 4 (id=5022): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 24m9.361077119s ago: executing program 4 (id=5023): r0 = msgget$private(0x0, 0x520) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000cab000)=0xc) msgctl$IPC_SET(r0, 0x1, &(0x7f00000001c0)={{0x2, r3, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x7}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x3, 0x9, 0x10, 0x7, 0x3b55}) 24m9.175686834s ago: executing program 4 (id=5030): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./proc/fs/nfsd\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/35, 0x23) 24m9.129213865s ago: executing program 40 (id=5030): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./proc/fs/nfsd\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/35, 0x23) 23m58.89747339s ago: executing program 6 (id=5285): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0xdb, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0x1, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) 23m58.859269441s ago: executing program 6 (id=5287): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1946}, 0x16610, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830a}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x19f) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/target/loopback\x00', 0x1ff) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000056000/0x2000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) acct(&(0x7f0000000100)='./debug/tracing/trace_pipe\x00') 23m58.622470697s ago: executing program 6 (id=5293): socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x317e, 0x4) 23m57.816321337s ago: executing program 6 (id=5314): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000107437"], 0x20}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000005a000000030000000000000000000000000000000100000001") ioctl(r1, 0x400c0930, 0x0) 23m57.725461919s ago: executing program 6 (id=5317): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000001600)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x0, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {0x80}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x6}, {0xfffc}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0xfd}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x80, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {0x5}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23m57.418412556s ago: executing program 6 (id=5320): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x942, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 23m42.197442335s ago: executing program 41 (id=5320): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x942, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 14m57.46944095s ago: executing program 0 (id=11830): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 14m57.430111191s ago: executing program 0 (id=11835): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x2, 0x27d, &(0x7f0000005b00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./bus\x00') 14m57.360594913s ago: executing program 0 (id=11838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4015}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0xfdef}], 0x1}, 0x4005) 14m57.193245027s ago: executing program 0 (id=11843): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@prjquota}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@discard}, {@prjquota}]}, 0x1, 0x4af, &(0x7f0000001040)="$eJzs3M9rHGUfAPDvTH60ffsjefv2VVurRosQFJMmrdqDBxUFkYqCHiqeYrItodtGkii2FBtF6kWQgp6LR9G/wJOiiHoSvOrFkxSK9tLWg0RmdybZbHebJtlkY/L5wGafZ+aZmee78+uZ59lsAJtWX/YnidgREb9ERE81u7BAX/Xt+tVzozeunhtNYnb25T+SSrlrV8+NFkWL5bbnmf40In0/yTey0NSZsydHyuXSZJ4fnD71xuDUmbOPvHVq5ETpROn08JEjhw8NPf7Y8KN1SybJcuLM4rq2752J/Xufe/XiC6PHLr7+wxfZinbk82vjaJW+LPA/Zyvq5z3Y6o212c6adNLZxoqwJB0Rke2ursr53xMdMb/zeuLZ99paOWBVZfemLc1nz8wCG1gS7a4B0B7FjT57/i1ea9T0WBeuPFV9AMrivp6/qnM6I83LdNU937ZSX0Qcm/nrUvaKVeqHAACo9eHoJ0e7I2Z7bnz+fNb26Jmbk8YdlfffKn935WMovRHx34jYHRH/i4g9EfH/iErZOyPirhXW5+b2T3p5hau8paz990Q+trWw/Ve0/qK3I8/trMTflRwfL5cO5p9Jf3RtyfJDt9jG18/8/FGzebXtv+yVbf9YGpfmS6SXO+s66MZGpkcqjdIWuPJuxL7ORvEncyMBSUTsjYh9S1v1riIx/tBn+5sVahh/3hZeVAvGmWY/zcKbyeKfibr4C0nt+OT4TeOTg1ujXDo4WBwVN/vxpwsvNdt+0/jXaAztSqn6XrP/64v0JvMfRmlyaunbuPDrB02faRbf/w2P/7Q7eaUyztydT3t7ZHp6ciiiOzlayS+YPtw9t2w1P18+O/77DzQ+/3fny2TB3x0R2UF8T0Tc+2TEfXnd74+IByLiwC3i//7p5vOK+CNdxvHfAln8Yw2vf3PHf7b/58frl5HoOPndl822f3v7/3Al1Z9PqVz/FtGoOtkpVV/BlXx2AAAA8G+RVr4Dn6QDc+k0HRiofod/T/wnLU9MTT98fOLN02PV78r3Rlda9HT15P2h5fFyaSiZyddY7R8dzvuKi/7SQ3m/8ccd2yr5gdGJ8libY4fNbnuT8z/ze0e7awessm0Np9aMmQAbWP1Yc7owe/7FcDGAjcr/a8Pm1eT8Lyana1kXYG0t9/7/WovrAay9Ruf/+erbV0XeWABsTE3v//W/EgBsOPr/YJNKv2l3DYA2cv+HTWkl/9e/iomtk1Pfru8a3l6i+BWFJS21rkOOKBLpIoX/nl0vdd5kiS3RivW086oEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQOv8EAAD//0v26F4=") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000300)='./file0\x00', 0x0) 14m57.06565319s ago: executing program 0 (id=11847): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x1818e5c, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}]}, 0x1, 0x661, &(0x7f0000000600)="$eJzs3c9rJFkdAPBvVSfZJBM3WRFxg2LAwy7IZpJxcdWLs+vBOSy44B5EPEyYJGOYnh8kGXDGARPwoKAg4nWQufgPeJe5exNBvXkWRpERB3SclvrRk06nu9OZpLuT1OcDnX71+lXe+6byul5V9esKoLIWsh9pxJsRL64mEbMtr81E8eJCWe7pPx9cyx5JNBrf/kcSSZnXLJ+UzxfKhcmI+MMHEZ+sHax36979Gyv1RuFHERe3b965uHXv/jsbN1eur11fu7V86Svvvrf01eV3l1sa+uoulM9XPvzWZ3/+4+9/ef2P9XeSuBwfj/9wNdriOCkLsRAvyhBb88ci4r0s0eHvctacgxAqrVb+P45HxKdjNmr5UmE2Nn420sYBA9WoRTR6Sw4rAJxVujdUVXMc0Dy27+84+OMBj0qG58n7xQHQwfjHylMOk/mx0fTTpOXIqDi3MXcC9Wd1PH8w+fD5g/mHse88xLOXW2fsBOrpZmc3Ij7TKf4kb9tcHmkWf7rvWD+NiKWImCjb941jtCFpSQ/iPEwvR4m/dTtk8V8un7P8D16x/vbTWsOOH4Bqevx+uSPfyZb29n/Z2KM5/okO45+Z41+SyY16/9d9/Nfc30/m4560bRyWjVk+6vwrx9sz/vrTK7/sVn8x/pt/2Hxk9TfHgsPwZDdivi3+n2TBluOfLP6kw/bPily93F8d3/zT3690e23U8TceRbzV8fhnb1SapXpcn7y4vlFfWyp+dqzjd7//3m+61d85/tcGEGln2faf7hJ/y/ZP29fL/iZ3Ov/K3faM33706Ga3+mea8f8ve/vptP3Tv00kxfHmRJnzg93t7c3liInkw7JImb+yvb15qXe8RZlnjfx5uYj/7S/06v9FrNNtUU013zL7cOc7N552e+1V/v9bLia/aPTZhm6y+FcP3/4H+n+W94s+6/j3d+9+rmVx37tGr/injhkbAAAAAAAAVE2aX4NN0sWX6TRdXCzmy34qptP67a3tL67fvntrNeLt/POQ42mkSf6RkdliOVnfqK8tl5+HbS5falv+UkS8ERG/qk3ly4vXbtdXRx08AAAAAAAAAAAAAAAAAAAAnBIXyvn/zftU/6tWzP8HKuLwG8wduP8DcE4M8gaTwOmW9/9eu/jXh9cWYLjs/6G69H+oLv0fquto/X9iYO0Ahs/+H6pL/4fq0v+huvR/AAAAADiX3vj8478kEbHztan8ES0f8DHpF8638SOVrg2sHcDw6dFQXS8v/RvsQ+X0Nf7/T/nlgINvDjACSafMfHDQ6N35H3dcc8/u8dsGAAAAAAAAAAAAABTeerP7/P+jzQ0GzhrT/qC6jjH/31cHwBnnq/+huvYd49ujQyUdMos/Jru9cNj8fwAAAAAAAAAAAADgxMzkjyRdLOcCz0SaLi5GfCIi5mI8Wd+ory1FxOsR8efa+GvZ8vKoGw0AAAAAAAAAAAAAAAAAAADnzNa9+zdW6vW1zdbEfw/kdEzU+ihzJhLNu6AeXrjRR5meia/HEdeK5AQCnIuII6w1FRF9F544DVvwKImxlpwkYifb8qeiYZtbcTqakSdG/MYEAAAAAAAAAAAAAAAAAAAV1DL3uLP5Xw+5RQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwfHv3/z8ksTpdrNBX4f2JUccIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxN/w8AAP//2LM4jA==") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) 14m56.961459212s ago: executing program 0 (id=11853): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000800), 0x0, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}], 0x18}, 0x4000000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) close(r0) 14m56.928684724s ago: executing program 42 (id=11853): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000800), 0x0, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}], 0x18}, 0x4000000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) close(r0) 14m21.290936019s ago: executing program 2 (id=12145): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000a40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x1, 0x7, 0xfffffffffffffffe, 0x2, 0x1, 0xfffffffffffffffe, 0x2, 0x3, 0x4040c407}) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) socket(0x1, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={0x0}}, 0x0) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323900080003400000000720000480060001000002000005000200110000000c000300080001000000001e14000000110001"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x1c}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) 14m19.64541222s ago: executing program 3 (id=12154): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000a40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x1, 0x7, 0xfffffffffffffffe, 0x2, 0x1, 0xfffffffffffffffe, 0x2, 0x3, 0x4040c407}) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) socket(0x1, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={0x0}}, 0x0) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x1c}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) 14m19.516246743s ago: executing program 2 (id=12155): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xe000000000000000, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x440088c4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f0000000180), 0x1, 0x51a, &(0x7f0000001200)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x86) 14m18.559162977s ago: executing program 2 (id=12158): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000a40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x1, 0x7, 0xfffffffffffffffe, 0x2, 0x1, 0xfffffffffffffffe, 0x2, 0x3, 0x4040c407}) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) socket(0x1, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={0x0}}, 0x0) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323900080003400000000720000480060001000002000005000200110000000c000300080001000000001e14000000110001"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x1c}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) 14m17.750101947s ago: executing program 3 (id=12161): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000a40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x1, 0x7, 0xfffffffffffffffe, 0x2, 0x1, 0xfffffffffffffffe, 0x2, 0x3, 0x4040c407}) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) socket(0x1, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={0x0}}, 0x0) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x1c}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) 14m17.669599949s ago: executing program 2 (id=12162): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@prjquota}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@discard}, {@prjquota}]}, 0x1, 0x4af, &(0x7f0000001040)="$eJzs3M9rHGUfAPDvTH60ffsjefv2VVurRosQFJMmrdqDBxUFkYqCHiqeYrItodtGkii2FBtF6kWQgp6LR9G/wJOiiHoSvOrFkxSK9tLWg0RmdybZbHebJtlkY/L5wGafZ+aZmee78+uZ59lsAJtWX/YnidgREb9ERE81u7BAX/Xt+tVzozeunhtNYnb25T+SSrlrV8+NFkWL5bbnmf40In0/yTey0NSZsydHyuXSZJ4fnD71xuDUmbOPvHVq5ETpROn08JEjhw8NPf7Y8KN1SybJcuLM4rq2752J/Xufe/XiC6PHLr7+wxfZinbk82vjaJW+LPA/Zyvq5z3Y6o212c6adNLZxoqwJB0Rke2ursr53xMdMb/zeuLZ99paOWBVZfemLc1nz8wCG1gS7a4B0B7FjT57/i1ea9T0WBeuPFV9AMrivp6/qnM6I83LdNU937ZSX0Qcm/nrUvaKVeqHAACo9eHoJ0e7I2Z7bnz+fNb26Jmbk8YdlfffKn935WMovRHx34jYHRH/i4g9EfH/iErZOyPirhXW5+b2T3p5hau8paz990Q+trWw/Ve0/qK3I8/trMTflRwfL5cO5p9Jf3RtyfJDt9jG18/8/FGzebXtv+yVbf9YGpfmS6SXO+s66MZGpkcqjdIWuPJuxL7ORvEncyMBSUTsjYh9S1v1riIx/tBn+5sVahh/3hZeVAvGmWY/zcKbyeKfibr4C0nt+OT4TeOTg1ujXDo4WBwVN/vxpwsvNdt+0/jXaAztSqn6XrP/64v0JvMfRmlyaunbuPDrB02faRbf/w2P/7Q7eaUyztydT3t7ZHp6ciiiOzlayS+YPtw9t2w1P18+O/77DzQ+/3fny2TB3x0R2UF8T0Tc+2TEfXnd74+IByLiwC3i//7p5vOK+CNdxvHfAln8Yw2vf3PHf7b/58frl5HoOPndl822f3v7/3Al1Z9PqVz/FtGoOtkpVV/BlXx2AAAA8G+RVr4Dn6QDc+k0HRiofod/T/wnLU9MTT98fOLN02PV78r3Rlda9HT15P2h5fFyaSiZyddY7R8dzvuKi/7SQ3m/8ccd2yr5gdGJ8libY4fNbnuT8z/ze0e7awessm0Np9aMmQAbWP1Yc7owe/7FcDGAjcr/a8Pm1eT8Lyana1kXYG0t9/7/WovrAay9Ruf/+erbV0XeWABsTE3v//W/EgBsOPr/YJNKv2l3DYA2cv+HTWkl/9e/iomtk1Pfru8a3l6i+BWFJS21rkOOKBLpIoX/nl0vdd5kiS3RivW086oEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQOv8EAAD//0v26F4=") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x1) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000300)='./file0\x00', 0x0) 14m17.476560414s ago: executing program 2 (id=12163): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x2, 0x80000) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x6, 0x1}, 0x0, 0x0, 0xc40, 0x8, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x8e}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001180)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) socket$kcm(0x29, 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8]}, 0x8, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x80) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'gre0\x00', @ifru_ivalue=0x4}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) socket$kcm(0xa, 0x1, 0x106) ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f00000001c0)) 14m17.335575498s ago: executing program 2 (id=12164): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x606, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x201, 0xe7c, 0x3ff, 0x0, 0x800000, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200), 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x40001}, 0x881) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r0, 0x58, &(0x7f0000000400)}, 0x10) r3 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) 14m17.278786909s ago: executing program 43 (id=12164): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x606, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x201, 0xe7c, 0x3ff, 0x0, 0x800000, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200), 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x40001}, 0x881) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r0, 0x58, &(0x7f0000000400)}, 0x10) r3 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) 14m14.598845536s ago: executing program 3 (id=12172): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xe000000000000000, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x440088c4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f0000000180), 0x1, 0x51a, &(0x7f0000001200)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x86) 14m13.665845108s ago: executing program 3 (id=12173): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@prjquota}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@discard}, {@prjquota}]}, 0x1, 0x4af, &(0x7f0000001040)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x1) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000300)='./file0\x00', 0x0) 14m13.59776901s ago: executing program 3 (id=12174): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x6, 0x0) get_mempolicy(0x0, 0x0, 0xe4, &(0x7f00006d8000/0x2000)=nil, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0xffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000000) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./dev\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x0, @private2, 0x3}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x4080}, 0x20000040) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 14m13.392151226s ago: executing program 3 (id=12175): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000a40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x1, 0x7, 0xfffffffffffffffe, 0x2, 0x1, 0xfffffffffffffffe, 0x2, 0x3, 0x4040c407}) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) socket(0x1, 0x2, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={0x0}}, 0x0) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x1c}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) 14m13.381995336s ago: executing program 44 (id=12175): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000a40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x1, 0x7, 0xfffffffffffffffe, 0x2, 0x1, 0xfffffffffffffffe, 0x2, 0x3, 0x4040c407}) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) socket(0x1, 0x2, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={0x0}}, 0x0) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323900080003400000000720000480060001000002000005000200110000000c000300080001000000001e14000000110001"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x1c}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) 1.710835827s ago: executing program 1 (id=16148): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a040000000000080000000014000200fe8000000000000000000000000000bb"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.529013892s ago: executing program 1 (id=16151): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x100) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.360186236s ago: executing program 1 (id=16153): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1e, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff1}, {0xfff2, 0xfff1}}}, 0x24}}, 0x0) 1.145914262s ago: executing program 1 (id=16156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xc3}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}]}], {0x14}}, 0xc8}}, 0x0) 1.067936504s ago: executing program 1 (id=16159): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, &(0x7f00000005c0)="bad386dd", 0x5dc, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.057556274s ago: executing program 9 (id=16160): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00', 0xcd89}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x1, 0x4004851) setsockopt(r0, 0x84, 0x14, &(0x7f0000000040), 0x0) 925.653727ms ago: executing program 9 (id=16162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x1b, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}]}], {0x14}}, 0x8c}}, 0x0) 915.593967ms ago: executing program 8 (id=16163): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x100) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 783.863591ms ago: executing program 1 (id=16165): syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102000000400c20"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 744.470232ms ago: executing program 9 (id=16167): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x52cc) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) 737.041272ms ago: executing program 8 (id=16168): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f6"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 644.009034ms ago: executing program 7 (id=16169): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1', 0x1) 611.495985ms ago: executing program 9 (id=16170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xc3}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}]}], {0x14}}, 0xc8}}, 0x0) 561.919116ms ago: executing program 9 (id=16171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}}], {0x14}}, 0x80}}, 0x4008014) 548.863357ms ago: executing program 7 (id=16172): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00', 0xcd89}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x1, 0x4004851) setsockopt(r0, 0x84, 0x14, &(0x7f0000000040), 0x0) 545.556387ms ago: executing program 5 (id=16173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f00010069707636686561646572000008000200000000000700030020000000140000001100"], 0xec}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6019f14d00383c"], 0x0) 450.610539ms ago: executing program 9 (id=16174): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket(0x1, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x2, 0x2, 0x8, 0x1, 0xd, 0x3}, {0x9, 0x5, 0x0, 0x2, 0x200, 0x1, 0x7, 0x4}, {0x9, 0x5, 0x0, 0x3, 0x20, 0x9c, 0x9, 0x7}}}}}}]}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$kcm(0x2, 0xa, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r4, &(0x7f0000000000)='3', 0x4e) open(&(0x7f00000002c0)='./bus\x00', 0x60142, 0x10) write(r3, &(0x7f0000000500)='p:s/_ ./file0:0', 0xf) 399.28345ms ago: executing program 7 (id=16175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="580000000206012b000000000000000005000005050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c000780080012"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0) 381.787031ms ago: executing program 5 (id=16176): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, &(0x7f00000005c0)="bad386dd", 0x5dc, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @multicast}, 0x14) 358.028121ms ago: executing program 8 (id=16177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x1b, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}]}], {0x14}}, 0x8c}}, 0x0) 282.293384ms ago: executing program 7 (id=16178): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x100) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 233.395565ms ago: executing program 8 (id=16179): pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x2) fchdir(r1) r2 = open(&(0x7f0000000200)='.\x00', 0x0, 0x244) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001000)=""/248, 0x65) 192.741076ms ago: executing program 5 (id=16180): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x52cc) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000), 0x0) 152.461327ms ago: executing program 7 (id=16181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xc3}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}]}], {0x14}}, 0xa4}}, 0x0) 117.950257ms ago: executing program 5 (id=16182): openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0/file1\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000f00)='./file0/file2\x00', 0x42, 0x1ff) 96.512728ms ago: executing program 7 (id=16183): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") r0 = open(&(0x7f0000000280)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x6000) fallocate(r0, 0x0, 0x0, 0x8800000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, 0x0, 0x0, 0x5a00, 0x0, 0x3) 88.182068ms ago: executing program 8 (id=16184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x24, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}}], {0x14}}, 0xac}}, 0x4008014) 59.217289ms ago: executing program 5 (id=16185): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00', 0xcd89}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x1, 0x4004851) setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)="02000000", 0x4) 13.32515ms ago: executing program 5 (id=16186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f00010069707636686561646572000008000200000000000700030020000000140000001100"], 0xec}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6019f14d00383c"], 0x0) 0s ago: executing program 8 (id=16187): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10', 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): writeback. [ 2167.915020][T27212] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15511'. [ 2167.915041][T27212] netlink: 12 bytes leftover after parsing attributes in process `syz.9.15511'. [ 2168.033255][T27215] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 2168.033584][T27215] ext4 filesystem being mounted at /441/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2168.108563][ T29] audit: type=1400 audit(1791315801.899:17751): avc: denied { write } for pid=27193 comm="syz.8.15509" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2168.170735][T27212] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15511'. [ 2168.172549][T27212] netlink: 12 bytes leftover after parsing attributes in process `syz.9.15511'. [ 2168.189208][T12237] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2168.189244][T12237] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2168.189320][T12237] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2168.199650][T12237] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2168.481453][T27184] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2168.486392][T17815] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 2168.523958][T27216] set_capacity_and_notify: 5 callbacks suppressed [ 2168.523975][T27216] loop1: detected capacity change from 0 to 512 [ 2168.543255][ T29] audit: type=1400 audit(1791315802.399:17752): avc: denied { write } for pid=27185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2168.584479][T27216] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.15514: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 2168.584615][T27216] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 2168.587870][T27216] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.15514: couldn't read orphan inode 11 (err -117) [ 2168.587953][T27216] loop1: lost filesystem error report for type 5 error -117 [ 2168.590802][T27216] EXT4-fs (loop1): 1 truncate cleaned up [ 2168.614113][T27216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2169.395181][T24569] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2169.409744][T25438] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2169.466388][T27238] loop9: detected capacity change from 0 to 128 [ 2169.497642][T27241] syzkaller0: entered promiscuous mode [ 2169.497661][T27241] syzkaller0: entered allmulticast mode [ 2169.508053][T27241] tipc: Started in network mode [ 2169.508097][T27241] tipc: Node identity 9a2460895e5a, cluster identity 4711 [ 2169.508137][T27241] tipc: Enabled bearer , priority 0 [ 2169.511943][T27238] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 2169.513071][T27238] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2169.519531][T27241] tipc: Resetting bearer [ 2169.522441][T27240] tipc: Resetting bearer [ 2169.529881][T27240] tipc: Disabling bearer [ 2169.747086][T27256] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2169.791995][T27256] md: array md0 already initialised! [ 2170.368500][T27256] md: could not open device unknown-block(1,0). [ 2170.368627][T27256] md: error, md_import_device() returned -6 [ 2170.531682][T27260] loop1: detected capacity change from 0 to 512 [ 2170.574672][T27278] syzkaller0: entered promiscuous mode [ 2170.574692][T27278] syzkaller0: entered allmulticast mode [ 2170.831007][T27274] loop7: detected capacity change from 0 to 128 [ 2170.874589][T27260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2170.876032][T27285] loop5: detected capacity change from 0 to 512 [ 2170.897237][T27285] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 2171.404545][T27260] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2171.432927][T27274] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 2171.435530][T27274] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2171.454888][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 2171.454903][ T29] audit: type=1400 audit(1791315805.300:17754): avc: denied { write } for pid=27258 comm="syz.1.15527" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2171.455006][ T29] audit: type=1400 audit(1791315805.300:17755): avc: denied { write } for pid=27258 comm="syz.1.15527" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2171.455049][ T29] audit: type=1400 audit(1791315805.300:17756): avc: denied { write } for pid=27258 comm="syz.1.15527" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2171.513335][T27285] EXT4-fs (loop5): 1 truncate cleaned up [ 2171.514330][T27285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2171.731203][T25695] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2171.838022][ T29] audit: type=1400 audit(1791315805.660:17757): avc: denied { write } for pid=27284 comm="syz.5.15534" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2172.212155][T24569] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2172.526135][T27295] loop8: detected capacity change from 0 to 164 [ 2172.534838][T27295] isofs_fill_super: root inode is not a directory. Corrupted media? [ 2172.812410][T25438] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2172.909150][T21252] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2173.161782][T27317] syzkaller0: entered promiscuous mode [ 2173.161803][T27317] syzkaller0: entered allmulticast mode [ 2173.188984][T27317] tipc: Started in network mode [ 2173.189013][T27317] tipc: Node identity baa5a08d1bbb, cluster identity 4711 [ 2173.189047][T27317] tipc: Enabled bearer , priority 0 [ 2173.196162][T27317] tipc: Resetting bearer [ 2173.227481][T27316] tipc: Resetting bearer [ 2173.237997][T27316] tipc: Disabling bearer [ 2173.252188][T27322] loop7: detected capacity change from 0 to 512 [ 2173.261059][T27322] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 2173.263744][T27322] EXT4-fs (loop7): 1 truncate cleaned up [ 2173.264224][T27322] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2173.485113][T27329] loop8: detected capacity change from 0 to 512 [ 2173.502680][T27329] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 2173.502709][T27329] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 2173.502745][T27329] System zones: 0-1, 15-15, 18-18, 34-34 [ 2173.503022][T27329] EXT4-fs (loop8): orphan cleanup on readonly fs [ 2173.503054][T27329] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0 [ 2173.503118][T27329] EXT4-fs warning (device loop8): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 2173.503164][T27329] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 2173.504379][T27329] EXT4-fs error (device loop8): ext4_orphan_get:1429: comm syz.8.15545: bad orphan inode 16 [ 2173.504409][T27329] loop8: lost filesystem error report for type 5 error -117 [ 2173.506029][T27329] ext4_test_bit(bit=15, block=18) = 1 [ 2173.506085][T27329] is_bad_inode(inode)=0 [ 2173.506095][T27329] NEXT_ORPHAN(inode)=0 [ 2173.506106][T27329] max_ino=32 [ 2173.506115][T27329] i_nlink=2 [ 2173.506609][T27329] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2173.634365][ T29] audit: type=1400 audit(1791315807.450:17758): avc: denied { write } for pid=27321 comm="syz.7.15546" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2174.235513][T21252] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2174.240065][T27328] hub 8-0:1.0: USB hub found [ 2174.240151][T27328] hub 8-0:1.0: 8 ports detected [ 2174.440879][T17815] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2174.471976][T27344] loop1: detected capacity change from 0 to 512 [ 2174.491233][T27344] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 2174.491251][T27344] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 2174.491277][T27344] System zones: 0-1, 15-15, 18-18, 34-34 [ 2174.491474][T27344] EXT4-fs (loop1): orphan cleanup on readonly fs [ 2174.491584][T27344] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 2174.491610][T27344] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 2174.491642][T27344] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 2174.494559][T27344] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.15550: bad orphan inode 16 [ 2174.494588][T27344] loop1: lost filesystem error report for type 5 error -117 [ 2174.497468][T27344] ext4_test_bit(bit=15, block=18) = 1 [ 2174.497487][T27344] is_bad_inode(inode)=0 [ 2174.497496][T27344] NEXT_ORPHAN(inode)=0 [ 2174.497505][T27344] max_ino=32 [ 2174.497513][T27344] i_nlink=2 [ 2174.498380][T27344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2174.570656][T27347] loop5: detected capacity change from 0 to 164 [ 2174.574969][T27347] isofs_fill_super: root inode is not a directory. Corrupted media? [ 2174.750726][T27349] ªªªªª»: renamed from vlan0 (while UP) [ 2174.784206][T27353] loop7: detected capacity change from 0 to 512 [ 2174.795895][T27353] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 2174.810165][T27353] EXT4-fs (loop7): 1 truncate cleaned up [ 2174.810583][T27353] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2175.427558][T25438] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2175.765372][T27367] loop5: detected capacity change from 0 to 512 [ 2175.778225][T27367] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 2175.815031][ T29] audit: type=1400 audit(1791315809.650:17759): avc: denied { write } for pid=27350 comm="syz.7.15553" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2175.815108][ T29] audit: type=1400 audit(1791315809.650:17760): avc: denied { write } for pid=27350 comm="syz.7.15553" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2176.019013][T27369] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.15553: invalid indirect mapped block 4294967295 (level 1) [ 2176.020308][T27369] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.15553: invalid indirect mapped block 65535 (level 2) [ 2176.020392][T27367] EXT4-fs (loop5): 1 truncate cleaned up [ 2176.020831][T27367] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2176.235091][T21252] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2176.329285][ T29] audit: type=1400 audit(1791315810.160:17761): avc: denied { write } for pid=27366 comm="syz.5.15557" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2176.335982][T27373] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.15557: invalid indirect mapped block 4294967295 (level 1) [ 2176.336670][T27373] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.15557: invalid indirect mapped block 65535 (level 2) [ 2176.821438][T24569] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2176.980524][T27380] loop5: detected capacity change from 0 to 512 [ 2177.041839][T27380] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 2177.041861][T27380] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 2177.041976][T27380] System zones: 0-1, 15-15, 18-18, 34-34 [ 2177.042108][T27380] EXT4-fs (loop5): orphan cleanup on readonly fs [ 2177.042215][T27380] __quota_error: 1 callbacks suppressed [ 2177.042231][T27380] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 2177.042287][T27380] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 2177.042324][T27380] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 2177.043530][T27380] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.15560: bad orphan inode 16 [ 2177.043561][T27380] loop5: lost filesystem error report for type 5 error -117 [ 2177.045093][T27380] ext4_test_bit(bit=15, block=18) = 1 [ 2177.045114][T27380] is_bad_inode(inode)=0 [ 2177.045171][T27380] NEXT_ORPHAN(inode)=0 [ 2177.045181][T27380] max_ino=32 [ 2177.045191][T27380] i_nlink=2 [ 2177.045734][T27380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2177.364367][T27389] loop9: detected capacity change from 0 to 512 [ 2177.383611][T27389] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 2177.409097][T27389] EXT4-fs (loop9): 1 truncate cleaned up [ 2177.417091][T27389] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2178.425787][ T29] audit: type=1400 audit(1791315811.841:17763): avc: denied { write } for pid=27388 comm="syz.9.15563" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2178.425835][ T29] audit: type=1400 audit(1791315811.841:17764): avc: denied { write } for pid=27388 comm="syz.9.15563" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2178.588265][T27396] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.15563: invalid indirect mapped block 4294967295 (level 1) [ 2178.588666][T27396] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.15563: invalid indirect mapped block 65535 (level 2) [ 2178.699154][T24569] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2178.715761][T25695] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2178.921192][T27410] loop9: detected capacity change from 0 to 164 [ 2178.944715][T27410] isofs_fill_super: root inode is not a directory. Corrupted media? [ 2178.963640][T27407] syzkaller0: entered promiscuous mode [ 2178.963666][T27407] syzkaller0: entered allmulticast mode [ 2178.968318][T27408] netlink: 40 bytes leftover after parsing attributes in process `syz.5.15570'. [ 2179.404403][T27424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2179.406052][T27424] 8021q: adding VLAN 0 to HW filter on device team0 [ 2179.422822][T27424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2179.462452][T27424] veth1_vlan: left promiscuous mode [ 2179.463074][T27424] veth0_vlan: left promiscuous mode [ 2179.465101][T27424] veth0_vlan: entered promiscuous mode [ 2179.467708][T27424] veth1_vlan: entered promiscuous mode [ 2179.473701][T27424] veth1_macvtap: left promiscuous mode [ 2179.474188][T27424] veth0_macvtap: left promiscuous mode [ 2179.475940][T27424] veth0_macvtap: entered promiscuous mode [ 2179.479625][T27424] veth1_macvtap: entered promiscuous mode [ 2179.486169][T27424] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2179.493589][T27424] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2179.496189][T27424] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2179.500654][T27424] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2179.508106][T27425] syz_tun: entered allmulticast mode [ 2179.560835][T27422] syz_tun: left allmulticast mode [ 2179.605796][T27431] syz_tun: entered allmulticast mode [ 2179.606484][T27430] syz_tun: left allmulticast mode [ 2179.641759][T27435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15577'. [ 2179.641783][T27435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15577'. [ 2179.662370][T27435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15577'. [ 2179.662456][T27435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15577'. [ 2179.668444][T17434] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2179.675274][T17434] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2179.676046][T17434] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2179.676154][T17434] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2179.727647][T27433] SELinux: invalid class [ 2179.729006][T27433] SELinux: failed to load policy [ 2179.769930][T27439] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2179.798069][T27439] md: array md0 already initialised! [ 2179.881973][T27439] md: could not open device unknown-block(1,0). [ 2179.881995][T27439] md: error, md_import_device() returned -6 [ 2179.946691][T27458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15588'. [ 2179.946784][T27458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15588'. [ 2179.952523][T27458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15588'. [ 2179.952575][T27458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15588'. [ 2180.021679][T27463] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 2180.021724][T27463] SELinux: failed to load policy [ 2180.086059][T27465] loop1: detected capacity change from 0 to 128 [ 2180.124781][T27465] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 2180.131529][T27465] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2180.273093][T27485] loop8: detected capacity change from 0 to 164 [ 2180.274733][T27485] isofs_fill_super: root inode is not a directory. Corrupted media? [ 2180.479294][T27493] loop7: detected capacity change from 0 to 128 [ 2180.493091][T27493] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 2180.493621][T27493] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2180.720800][T25438] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2180.739800][T27497] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2180.777203][T27497] md: array md0 already initialised! [ 2180.838603][T27503] ./dev/sda1: Can't lookup blockdev [ 2180.988818][T27510] loop1: detected capacity change from 0 to 512 [ 2181.089761][T27510] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 2181.089778][T27510] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 2181.089831][T27510] System zones: 0-1, 15-15, 18-18, 34-34 [ 2181.090176][T27510] EXT4-fs (loop1): orphan cleanup on readonly fs [ 2181.090301][T27510] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 2181.090399][T27510] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 2181.090522][T27510] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 2181.091508][T27510] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.15606: bad orphan inode 16 [ 2181.091556][T27510] loop1: lost filesystem error report for type 5 error -117 [ 2181.091842][T27510] ext4_test_bit(bit=15, block=18) = 1 [ 2181.091855][T27510] is_bad_inode(inode)=0 [ 2181.091939][T27510] NEXT_ORPHAN(inode)=0 [ 2181.091961][T27510] max_ino=32 [ 2181.091981][T27510] i_nlink=2 [ 2181.095379][T27510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2181.489862][T27516] FAULT_INJECTION: forcing a failure. [ 2181.489862][T27516] name failslab, interval 1, probability 0, space 0, times 0 [ 2181.489895][T27516] CPU: 1 UID: 0 PID: 27516 Comm: syz.7.15607 Not tainted syzkaller #0 PREEMPT(lazy) [ 2181.489921][T27516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2181.489936][T27516] Call Trace: [ 2181.489946][T27516] [ 2181.489980][T27516] __dump_stack+0x1d/0x30 [ 2181.490015][T27516] dump_stack_lvl+0x95/0xd0 [ 2181.490125][T27516] dump_stack+0x15/0x1b [ 2181.490155][T27516] should_fail_ex+0x262/0x280 [ 2181.490195][T27516] should_failslab+0x8c/0xb0 [ 2181.490303][T27516] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 2181.490392][T27516] ? kstrdup_const+0x3e/0x50 [ 2181.490426][T27516] ? kstrdup_const+0x3e/0x50 [ 2181.490464][T27516] kstrdup+0x3e/0xd0 [ 2181.490497][T27516] kstrdup_const+0x3e/0x50 [ 2181.490543][T27516] __kernfs_new_node+0x42/0x440 [ 2181.490573][T27516] ? rb_insert_color+0x6e/0x2a0 [ 2181.490603][T27516] ? __rcu_read_unlock+0x4e/0x70 [ 2181.490685][T27516] ? __rcu_read_unlock+0x4e/0x70 [ 2181.490733][T27516] ? kernfs_activate_one+0x10c/0x140 [ 2181.490768][T27516] ? __rcu_read_unlock+0x4e/0x70 [ 2181.490874][T27516] ? up_write+0x19/0x60 [ 2181.490921][T27516] kernfs_new_node+0xcf/0xf0 [ 2181.490961][T27516] kernfs_create_link+0x70/0x130 [ 2181.490997][T27516] sysfs_do_create_link_sd+0x6a/0x100 [ 2181.491108][T27516] sysfs_create_link+0x51/0x70 [ 2181.491222][T27516] device_add_class_symlinks+0x168/0x1d0 [ 2181.491263][T27516] device_add+0x359/0x790 [ 2181.491316][T27516] netdev_register_kobject+0x127/0x240 [ 2181.491410][T27516] register_netdevice+0xaf7/0x11a0 [ 2181.491445][T27516] ppp_dev_configure+0x580/0x630 [ 2181.491492][T27516] ppp_ioctl+0x82e/0x12d0 [ 2181.491622][T27516] ? __pfx_ppp_ioctl+0x10/0x10 [ 2181.491667][T27516] __se_sys_ioctl+0xce/0x140 [ 2181.491715][T27516] __x64_sys_ioctl+0x43/0x50 [ 2181.491838][T27516] x64_sys_call+0x239d/0x2550 [ 2181.491941][T27516] do_syscall_64+0x112/0x360 [ 2181.491979][T27516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2181.492011][T27516] RIP: 0033:0x7ff90619e199 [ 2181.492034][T27516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2181.492069][T27516] RSP: 002b:00007ff904bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2181.492098][T27516] RAX: ffffffffffffffda RBX: 00007ff906425fa0 RCX: 00007ff90619e199 [ 2181.492119][T27516] RDX: 000000110c230000 RSI: 00000000c004743e RDI: 0000000000000004 [ 2181.492200][T27516] RBP: 00007ff9062358e0 R08: 0000000000000000 R09: 0000000000000000 [ 2181.492215][T27516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2181.492229][T27516] R13: 00007ff906426038 R14: 00007ff906425fa0 R15: 00007ffeea701b48 [ 2181.492251][T27516] [ 2182.054580][T27518] SELinux: invalid class [ 2182.066918][T27518] SELinux: failed to load policy [ 2182.123712][T27527] loop5: detected capacity change from 0 to 164 [ 2182.127187][T27531] loop9: detected capacity change from 0 to 512 [ 2182.150705][T27531] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 2182.150727][T27531] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 2182.150807][T27531] System zones: 0-1, 15-15, 18-18, 34-34 [ 2182.151011][T27531] EXT4-fs (loop9): orphan cleanup on readonly fs [ 2182.151045][T27531] Quota error (device loop9): v2_read_header: Failed header read: expected=8 got=0 [ 2182.151082][T27531] EXT4-fs warning (device loop9): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 2182.151117][T27531] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 2182.152009][T27531] EXT4-fs error (device loop9): ext4_orphan_get:1429: comm syz.9.15614: bad orphan inode 16 [ 2182.152041][T27531] loop9: lost filesystem error report for type 5 error -117 [ 2182.152729][T27531] ext4_test_bit(bit=15, block=18) = 1 [ 2182.152749][T27531] is_bad_inode(inode)=0 [ 2182.152760][T27531] NEXT_ORPHAN(inode)=0 [ 2182.152770][T27531] max_ino=32 [ 2182.152779][T27531] i_nlink=2 [ 2182.157387][T27527] isofs_fill_super: root inode is not a directory. Corrupted media? [ 2182.204215][T27530] hub 8-0:1.0: USB hub found [ 2182.204441][T27530] hub 8-0:1.0: 8 ports detected [ 2182.463664][T27537] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15615'. [ 2182.467640][T27528] loop1: detected capacity change from 0 to 128 [ 2182.977604][T27528] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2183.624086][T27562] loop9: detected capacity change from 0 to 128 [ 2183.640371][T27562] EXT4-fs mount: 5 callbacks suppressed [ 2183.640401][T27562] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 2183.645208][T27562] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2184.150248][T25438] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2184.206592][T27568] loop5: detected capacity change from 0 to 512 [ 2184.238698][T27568] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 2184.238717][T27568] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 2184.238865][T27568] System zones: 0-1, 15-15, 18-18, 34-34 [ 2184.239059][T27568] EXT4-fs (loop5): orphan cleanup on readonly fs [ 2184.239086][T27568] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 2184.239115][T27568] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 2184.239156][T27568] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 2184.239487][T27568] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.15623: bad orphan inode 16 [ 2184.239509][T27568] loop5: lost filesystem error report for type 5 error -117 [ 2184.239618][T27568] ext4_test_bit(bit=15, block=18) = 1 [ 2184.239672][T27568] is_bad_inode(inode)=0 [ 2184.239682][T27568] NEXT_ORPHAN(inode)=0 [ 2184.239691][T27568] max_ino=32 [ 2184.239700][T27568] i_nlink=2 [ 2184.240070][T27568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2184.473856][T27573] loop7: detected capacity change from 0 to 164 [ 2184.528565][T27573] isofs_fill_super: root inode is not a directory. Corrupted media? [ 2184.560634][T27578] __nla_validate_parse: 2 callbacks suppressed [ 2184.560650][T27578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15626'. [ 2184.560881][T27578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15626'. [ 2184.939367][T25695] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2185.166056][T24569] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2186.030281][T27599] loop9: detected capacity change from 0 to 128 [ 2186.133627][T27599] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 2186.135166][T27599] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2186.181009][T27605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15629'. [ 2186.433423][T27608] sctp: [Deprecated]: syz.5.15634 (pid 27608) Use of int in max_burst socket option deprecated. [ 2186.433423][T27608] Use struct sctp_assoc_value instead [ 2186.493711][T27584] loop1: detected capacity change from 0 to 128 [ 2186.540602][T27612] syz_tun: entered allmulticast mode [ 2186.545082][T27611] syz_tun: left allmulticast mode [ 2186.586006][T27584] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 2186.589147][T27584] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2186.706670][T27621] sctp: [Deprecated]: syz.8.15639 (pid 27621) Use of int in max_burst socket option deprecated. [ 2186.706670][T27621] Use struct sctp_assoc_value instead [ 2186.758872][T27626] loop7: detected capacity change from 0 to 164 [ 2186.776477][T27626] isofs_fill_super: root inode is not a directory. Corrupted media? [ 2186.886862][T25695] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2186.923151][T27633] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2187.437985][T25438] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2188.053070][T27656] loop5: detected capacity change from 0 to 256 [ 2188.149099][T27656] FAT-fs (loop5): codepage cp936 not found [ 2188.349399][T27676] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2188.405509][T27643] loop8: detected capacity change from 0 to 512 [ 2189.136489][ T29] audit: type=1400 audit(1791315822.992:17765): avc: denied { write } for pid=27678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2189.526739][ T29] audit: type=1400 audit(1791315823.382:17766): avc: denied { write } for pid=27709 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2189.621755][T27717] loop9: detected capacity change from 0 to 512 [ 2189.623877][T27717] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 2189.629321][T27717] EXT4-fs (loop9): 1 truncate cleaned up [ 2189.632383][T27717] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2189.634454][T27643] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2189.643423][T27643] ext4 filesystem being mounted at /464/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2189.670089][ T29] audit: type=1400 audit(1791315823.522:17767): avc: denied { write } for pid=27642 comm="syz.8.15647" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2189.670190][ T29] audit: type=1400 audit(1791315823.522:17768): avc: denied { write } for pid=27642 comm="syz.8.15647" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2189.862706][T27722] loop5: detected capacity change from 0 to 128 [ 2189.874816][T27723] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2189.876704][ T29] audit: type=1400 audit(1791315823.732:17769): avc: denied { write } for pid=27642 comm="syz.8.15647" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2189.910605][T27722] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 2189.925643][T27722] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2190.015925][ T29] audit: type=1400 audit(1791315823.812:17770): avc: denied { write } for pid=27716 comm="syz.9.15663" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2190.016029][ T29] audit: type=1400 audit(1791315823.812:17771): avc: denied { write } for pid=27716 comm="syz.9.15663" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2190.096964][T27725] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.15663: invalid indirect mapped block 4294967295 (level 1) [ 2190.097274][T27725] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.15663: invalid indirect mapped block 65535 (level 2) [ 2190.404981][ T29] audit: type=1400 audit(1791315824.252:17772): avc: denied { write } for pid=27726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2190.448485][ T29] audit: type=1400 audit(1791315824.302:17773): avc: denied { write } for pid=27738 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2190.625569][ T29] audit: type=1400 audit(1791315824.472:17774): avc: denied { write } for pid=27740 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2190.757398][T27646] netlink: 48 bytes leftover after parsing attributes in process `syz.8.15647'. [ 2190.900707][T25695] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2190.946504][T27770] bond0: entered promiscuous mode [ 2191.672037][T24569] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2191.770966][T17434] IPVS: starting estimator thread 0... [ 2191.801510][T17815] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2191.865808][T27781] IPVS: using max 2160 ests per chain, 108000 per kthread [ 2192.399652][T27795] md: could not open device unknown-block(1,0). [ 2192.399676][T27795] md: error, md_import_device() returned -6 [ 2193.739795][T27811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15681'. [ 2194.084599][T27818] netlink: 36 bytes leftover after parsing attributes in process `syz.5.15681'. [ 2194.405631][T25384] IPVS: starting estimator thread 0... [ 2194.506072][T27822] IPVS: using max 2304 ests per chain, 115200 per kthread [ 2194.570470][T27825] sctp: [Deprecated]: syz.1.15685 (pid 27825) Use of int in max_burst socket option deprecated. [ 2194.570470][T27825] Use struct sctp_assoc_value instead [ 2194.795512][T27829] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 2194.795544][T27829] SELinux: failed to load policy [ 2195.006912][T27834] FAULT_INJECTION: forcing a failure. [ 2195.006912][T27834] name failslab, interval 1, probability 0, space 0, times 0 [ 2195.006946][T27834] CPU: 0 UID: 0 PID: 27834 Comm: syz.5.15688 Not tainted syzkaller #0 PREEMPT(lazy) [ 2195.006996][T27834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2195.007014][T27834] Call Trace: [ 2195.007021][T27834] [ 2195.007029][T27834] __dump_stack+0x1d/0x30 [ 2195.007095][T27834] dump_stack_lvl+0x95/0xd0 [ 2195.007123][T27834] dump_stack+0x15/0x1b [ 2195.007144][T27834] should_fail_ex+0x262/0x280 [ 2195.007299][T27834] ? do_getname+0x2e/0x1c0 [ 2195.007330][T27834] should_failslab+0x8c/0xb0 [ 2195.007374][T27834] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 2195.007423][T27834] ? do_getname+0x2e/0x1c0 [ 2195.007464][T27834] do_getname+0x2e/0x1c0 [ 2195.007573][T27834] getname_flags+0x1d/0x30 [ 2195.007600][T27834] do_sys_openat2+0x6c/0x130 [ 2195.007631][T27834] __x64_sys_openat+0xf2/0x120 [ 2195.007703][T27834] x64_sys_call+0x1f72/0x2550 [ 2195.007740][T27834] do_syscall_64+0x112/0x360 [ 2195.007776][T27834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2195.007804][T27834] RIP: 0033:0x7f7e98d5e199 [ 2195.007862][T27834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2195.007886][T27834] RSP: 002b:00007f7e977b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2195.007913][T27834] RAX: ffffffffffffffda RBX: 00007f7e98fe5fa0 RCX: 00007f7e98d5e199 [ 2195.007932][T27834] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 2195.007950][T27834] RBP: 00007f7e98df58e0 R08: 0000000000000000 R09: 0000000000000000 [ 2195.008051][T27834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2195.008068][T27834] R13: 00007f7e98fe6038 R14: 00007f7e98fe5fa0 R15: 00007ffe4b404a08 [ 2195.008096][T27834] [ 2195.172078][T27837] loop8: detected capacity change from 0 to 512 [ 2195.197205][T27837] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 2195.232832][T27837] EXT4-fs (loop8): 1 truncate cleaned up [ 2195.233234][T27837] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2195.279256][T27846] sctp: [Deprecated]: syz.9.15683 (pid 27846) Use of int in max_burst socket option deprecated. [ 2195.279256][T27846] Use struct sctp_assoc_value instead [ 2195.395999][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 2195.396018][ T29] audit: type=1400 audit(1791315829.243:17778): avc: denied { write } for pid=27835 comm="syz.8.15689" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2195.396053][ T29] audit: type=1400 audit(1791315829.243:17779): avc: denied { write } for pid=27835 comm="syz.8.15689" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2195.459770][T27837] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.15689: invalid indirect mapped block 4294967295 (level 1) [ 2195.460055][T27837] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.15689: invalid indirect mapped block 65535 (level 2) [ 2195.506836][T17815] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2195.673491][T27865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15699'. [ 2195.692796][T27867] ªªªªª»: renamed from vlan0 (while UP) [ 2195.871429][T27870] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15699'. [ 2195.927400][T27876] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 2195.927431][T27876] SELinux: failed to load policy [ 2196.055686][T27880] device-mapper: ioctl: name not supplied when creating device [ 2196.255597][T27887] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 2196.255629][T27887] SELinux: failed to load policy [ 2196.296964][T27889] syzkaller0: entered promiscuous mode [ 2196.296985][T27889] syzkaller0: entered allmulticast mode [ 2196.299568][T17434] IPVS: starting estimator thread 0... [ 2196.413685][T27896] syz_tun: entered allmulticast mode [ 2196.415145][T27892] IPVS: using max 2304 ests per chain, 115200 per kthread [ 2196.422104][T27894] syz_tun: left allmulticast mode [ 2196.491540][T27904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15715'. [ 2196.514268][T27899] syzkaller0: entered promiscuous mode [ 2196.514294][T27899] syzkaller0: entered allmulticast mode [ 2196.535153][T27899] tipc: Started in network mode [ 2196.535189][T27899] tipc: Node identity ee39e7bd8a07, cluster identity 4711 [ 2196.535287][T27899] tipc: Enabled bearer , priority 0 [ 2196.544271][T27899] tipc: Resetting bearer [ 2196.572795][T27897] tipc: Resetting bearer [ 2196.595643][T27897] tipc: Disabling bearer [ 2196.672883][T27906] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15715'. [ 2196.799922][T27914] loop9: detected capacity change from 0 to 164 [ 2196.804777][T27914] isofs_fill_super: root inode is not a directory. Corrupted media? [ 2196.851227][T27916] syzkaller0: entered promiscuous mode [ 2196.851247][T27916] syzkaller0: entered allmulticast mode [ 2196.985505][T20654] IPVS: starting estimator thread 0... [ 2197.075101][T27920] IPVS: using max 2256 ests per chain, 112800 per kthread [ 2198.285712][T27942] ªªªªª»: renamed from vlan0 (while UP) [ 2198.759816][T27956] hub 8-0:1.0: USB hub found [ 2198.759881][T27956] hub 8-0:1.0: 8 ports detected [ 2199.524276][T27972] tipc: Enabling of bearer rejected, failed to enable media [ 2199.787805][T27992] loop7: detected capacity change from 0 to 512 [ 2199.799067][T27992] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #11: comm syz.7.15741: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 2199.799128][T27992] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 2199.799352][T27992] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.15741: couldn't read orphan inode 11 (err -117) [ 2199.799389][T27992] loop7: lost filesystem error report for type 5 error -117 [ 2199.799564][T27992] EXT4-fs (loop7): 1 truncate cleaned up [ 2199.802838][T27992] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2199.869660][T27995] loop5: detected capacity change from 0 to 164 [ 2199.871487][T27995] isofs_fill_super: root inode is not a directory. Corrupted media? [ 2200.624209][T21252] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2200.687640][T28006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15747'. [ 2200.850835][T28013] netlink: 36 bytes leftover after parsing attributes in process `syz.5.15747'. [ 2201.253803][T28034] loop9: detected capacity change from 0 to 512 [ 2201.271008][T28034] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #11: comm syz.9.15755: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 2201.271058][T28034] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 2201.271654][T28034] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.15755: couldn't read orphan inode 11 (err -117) [ 2201.271748][T28034] loop9: lost filesystem error report for type 5 error -117 [ 2201.273094][T28034] EXT4-fs (loop9): 1 truncate cleaned up [ 2201.292131][T28034] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2201.327719][T28029] loop7: detected capacity change from 0 to 128 [ 2201.412491][T28029] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 2201.416275][T28029] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2201.756296][T28045] loop8: detected capacity change from 0 to 164 [ 2202.386848][T25695] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2202.403804][T28045] isofs_fill_super: root inode is not a directory. Corrupted media? [ 2202.754233][T28054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2202.756486][T28054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2203.767190][T21252] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2203.895787][T28066] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15764'. [ 2204.404955][T28083] FAULT_INJECTION: forcing a failure. [ 2204.404955][T28083] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2204.404992][T28083] CPU: 1 UID: 0 PID: 28083 Comm: syz.5.15771 Not tainted syzkaller #0 PREEMPT(lazy) [ 2204.405029][T28083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2204.405048][T28083] Call Trace: [ 2204.405058][T28083] [ 2204.405068][T28083] __dump_stack+0x1d/0x30 [ 2204.405102][T28083] dump_stack_lvl+0x95/0xd0 [ 2204.405159][T28083] dump_stack+0x15/0x1b [ 2204.405190][T28083] should_fail_ex+0x262/0x280 [ 2204.405257][T28083] should_fail+0xb/0x20 [ 2204.405283][T28083] get_futex_key+0x12d/0xb10 [ 2204.405315][T28083] futex_wait_setup+0x49/0x3e0 [ 2204.405403][T28083] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 2204.405430][T28083] ? hrtimer_active+0xe4/0x110 [ 2204.405454][T28083] __futex_wait+0xa9/0x260 [ 2204.405476][T28083] ? __pfx_futex_wake_mark+0x10/0x10 [ 2204.405579][T28083] futex_wait+0x98/0x1c0 [ 2204.405605][T28083] do_futex+0x391/0x460 [ 2204.405644][T28083] __se_sys_futex+0x2f6/0x370 [ 2204.405714][T28083] __x64_sys_futex+0x78/0x90 [ 2204.405796][T28083] x64_sys_call+0x22e2/0x2550 [ 2204.405832][T28083] do_syscall_64+0x112/0x360 [ 2204.405869][T28083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2204.405898][T28083] RIP: 0033:0x7f7e98d5e199 [ 2204.405921][T28083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2204.405980][T28083] RSP: 002b:00007f7e977b70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2204.406007][T28083] RAX: ffffffffffffffda RBX: 00007f7e98fe5fa8 RCX: 00007f7e98d5e199 [ 2204.406023][T28083] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7e98fe5fa8 [ 2204.406037][T28083] RBP: 00007f7e98fe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2204.406097][T28083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2204.406110][T28083] R13: 00007f7e98fe6038 R14: 00007ffe4b404920 R15: 00007ffe4b404a08 [ 2204.406135][T28083] [ 2204.413427][T28066] netlink: 36 bytes leftover after parsing attributes in process `syz.7.15764'. [ 2205.324706][T28096] loop8: detected capacity change from 0 to 2048 [ 2205.506905][T28096] loop8: p1 < > [ 2205.510528][ T29] audit: type=1400 audit(1791315839.364:17780): avc: denied { ioctl } for pid=28095 comm="syz.8.15777" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2205.642582][T28107] IPVS: rr: FWM 3 0x00000003 - no destination available [ 2205.642656][ C0] IPVS: rr: FWM 3 0x00000003 - no destination available [ 2205.725287][T28113] netlink: 'syz.7.15783': attribute type 4 has an invalid length. [ 2205.759755][T28116] bond0: entered promiscuous mode [ 2205.773049][T28116] batadv0: entered promiscuous mode [ 2205.784331][T28116] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 2205.784565][T28116] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 2205.928464][T28131] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15787'. [ 2205.965305][T28131] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2206.009397][T28131] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15787'. [ 2206.009421][T28131] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15787'. [ 2206.013370][T28138] netlink: 'syz.1.15789': attribute type 4 has an invalid length. [ 2206.013413][T28138] netlink: 17 bytes leftover after parsing attributes in process `syz.1.15789'. [ 2206.053088][T28138] FAULT_INJECTION: forcing a failure. [ 2206.053088][T28138] name failslab, interval 1, probability 0, space 0, times 0 [ 2206.053118][T28138] CPU: 1 UID: 0 PID: 28138 Comm: syz.1.15789 Not tainted syzkaller #0 PREEMPT(lazy) [ 2206.053224][T28138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2206.053237][T28138] Call Trace: [ 2206.053244][T28138] [ 2206.053254][T28138] __dump_stack+0x1d/0x30 [ 2206.053309][T28138] dump_stack_lvl+0x95/0xd0 [ 2206.053337][T28138] dump_stack+0x15/0x1b [ 2206.053369][T28138] should_fail_ex+0x262/0x280 [ 2206.053415][T28138] ? resize+0x1d4/0x1420 [ 2206.053439][T28138] should_failslab+0x8c/0xb0 [ 2206.053496][T28138] __kmalloc_noprof+0xd0/0x4d0 [ 2206.053543][T28138] ? resize+0x1d4/0x1420 [ 2206.053565][T28138] resize+0x1d4/0x1420 [ 2206.053585][T28138] ? fib_insert_alias+0x2a7/0x7b0 [ 2206.053748][T28138] ? should_failslab+0x8c/0xb0 [ 2206.053795][T28138] ? fib_insert_alias+0x2a7/0x7b0 [ 2206.053823][T28138] ? put_child+0x2af/0x2d0 [ 2206.053919][T28138] fib_insert_alias+0x720/0x7b0 [ 2206.054012][T28138] fib_trie_unmerge+0x456/0xa80 [ 2206.054045][T28138] fib_unmerge+0x7d/0x200 [ 2206.054138][T28138] fib4_rule_configure+0x21f/0x520 [ 2206.054182][T28138] fib_newrule+0x4b8/0xa00 [ 2206.054211][T28138] ? avc_has_perm_noaudit+0xac/0x160 [ 2206.054395][T28138] fib_nl_newrule+0x46/0x60 [ 2206.054460][T28138] ? __pfx_fib_nl_newrule+0x10/0x10 [ 2206.054481][T28138] rtnetlink_rcv_msg+0x64b/0x720 [ 2206.054517][T28138] netlink_rcv_skb+0x11e/0x220 [ 2206.054612][T28138] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2206.054663][T28138] rtnetlink_rcv+0x1c/0x30 [ 2206.054699][T28138] netlink_unicast+0x5a9/0x680 [ 2206.054821][T28138] netlink_sendmsg+0x5be/0x6f0 [ 2206.054876][T28138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2206.054926][T28138] ____sys_sendmsg+0x532/0x580 [ 2206.054956][T28138] ___sys_sendmsg+0x195/0x1e0 [ 2206.055035][T28138] __x64_sys_sendmsg+0xd4/0x160 [ 2206.055124][T28138] x64_sys_call+0x22ab/0x2550 [ 2206.055184][T28138] do_syscall_64+0x112/0x360 [ 2206.055212][T28138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2206.055239][T28138] RIP: 0033:0x7fa53cfae199 [ 2206.055263][T28138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2206.055290][T28138] RSP: 002b:00007fa53ba07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2206.055343][T28138] RAX: ffffffffffffffda RBX: 00007fa53d235fa0 RCX: 00007fa53cfae199 [ 2206.055365][T28138] RDX: 0000000000004000 RSI: 0000200000000100 RDI: 0000000000000004 [ 2206.055384][T28138] RBP: 00007fa53d0458e0 R08: 0000000000000000 R09: 0000000000000000 [ 2206.055403][T28138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2206.055418][T28138] R13: 00007fa53d236038 R14: 00007fa53d235fa0 R15: 00007ffd45e767d8 [ 2206.055445][T28138] [ 2206.134653][T28131] netlink: 'syz.8.15787': attribute type 10 has an invalid length. [ 2206.288460][T28131] syz_tun: entered promiscuous mode [ 2206.292529][T28145] loop7: detected capacity change from 0 to 512 [ 2206.355180][T28145] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2206.355453][T28145] ext4 filesystem being mounted at /294/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2206.407558][ T29] audit: type=1400 audit(1791315840.264:17781): avc: denied { write } for pid=28144 comm="syz.7.15792" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2206.437997][T28131] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2206.438176][T28151] hsr0 speed is unknown, defaulting to 1000 [ 2206.438204][T28151] hsr0 speed is unknown, defaulting to 1000 [ 2206.438456][T28151] hsr0 speed is unknown, defaulting to 1000 [ 2206.439187][T28151] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 2206.465351][ T29] audit: type=1400 audit(1791315840.324:17782): avc: denied { write } for pid=28144 comm="syz.7.15792" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2206.502646][T28151] hsr0 speed is unknown, defaulting to 1000 [ 2206.503119][T28151] hsr0 speed is unknown, defaulting to 1000 [ 2206.519298][T28151] hsr0 speed is unknown, defaulting to 1000 [ 2206.519663][T28151] hsr0 speed is unknown, defaulting to 1000 [ 2206.519971][T28151] hsr0 speed is unknown, defaulting to 1000 [ 2206.798208][ T29] audit: type=1400 audit(1791315840.654:17783): avc: denied { ioctl } for pid=28169 comm="syz.8.15802" path="socket:[192583]" dev="sockfs" ino=192583 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2206.890219][T28170] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2206.977423][T28176] FAULT_INJECTION: forcing a failure. [ 2206.977423][T28176] name failslab, interval 1, probability 0, space 0, times 0 [ 2206.977549][T28176] CPU: 0 UID: 0 PID: 28176 Comm: syz.5.15805 Not tainted syzkaller #0 PREEMPT(lazy) [ 2206.977597][T28176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2206.977617][T28176] Call Trace: [ 2206.977626][T28176] [ 2206.977637][T28176] __dump_stack+0x1d/0x30 [ 2206.977674][T28176] dump_stack_lvl+0x95/0xd0 [ 2206.977780][T28176] dump_stack+0x15/0x1b [ 2206.977811][T28176] should_fail_ex+0x262/0x280 [ 2206.977851][T28176] ? __alloc_skb+0x2e0/0x6f0 [ 2206.977880][T28176] should_failslab+0x8c/0xb0 [ 2206.977948][T28176] kmem_cache_alloc_node_noprof+0x82/0x400 [ 2206.977988][T28176] ? genl_family_rcv_msg_doit+0x1c3/0x1f0 [ 2206.978117][T28176] ? __alloc_skb+0x2e0/0x6f0 [ 2206.978149][T28176] __alloc_skb+0x2e0/0x6f0 [ 2206.978258][T28176] ? __alloc_skb+0x209/0x6f0 [ 2206.978283][T28176] netlink_ack+0xfd/0x530 [ 2206.978316][T28176] ? __pfx_ctrl_getfamily+0x10/0x10 [ 2206.978391][T28176] netlink_rcv_skb+0x18d/0x220 [ 2206.978420][T28176] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2206.978495][T28176] genl_rcv+0x28/0x40 [ 2206.978677][T28176] netlink_unicast+0x5a9/0x680 [ 2206.978724][T28176] netlink_sendmsg+0x5be/0x6f0 [ 2206.978749][T28176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2206.978812][T28176] __sys_sendto+0x411/0x470 [ 2206.978855][T28176] __x64_sys_sendto+0x76/0x90 [ 2206.978885][T28176] x64_sys_call+0x200c/0x2550 [ 2206.978991][T28176] do_syscall_64+0x112/0x360 [ 2206.979051][T28176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2206.979083][T28176] RIP: 0033:0x7f7e98d1e9ce [ 2206.979106][T28176] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2206.979134][T28176] RSP: 002b:00007f7e977b5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2206.979163][T28176] RAX: ffffffffffffffda RBX: 00007f7e977b76c0 RCX: 00007f7e98d1e9ce [ 2206.979220][T28176] RDX: 0000000000000024 RSI: 00007f7e977b6000 RDI: 0000000000000004 [ 2206.979234][T28176] RBP: 0000000000000000 R08: 00007f7e977b5f04 R09: 000000000000000c [ 2206.979254][T28176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2206.979316][T28176] R13: 00007f7e977b5f58 R14: 00007f7e977b6000 R15: 0000000000000000 [ 2206.979341][T28176] [ 2207.134558][T28177] FAULT_INJECTION: forcing a failure. [ 2207.134558][T28177] name failslab, interval 1, probability 0, space 0, times 0 [ 2207.134591][T28177] CPU: 0 UID: 0 PID: 28177 Comm: syz.1.15803 Not tainted syzkaller #0 PREEMPT(lazy) [ 2207.134711][T28177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2207.134785][T28177] Call Trace: [ 2207.134792][T28177] [ 2207.134812][T28177] __dump_stack+0x1d/0x30 [ 2207.134906][T28177] dump_stack_lvl+0x95/0xd0 [ 2207.134994][T28177] dump_stack+0x15/0x1b [ 2207.135061][T28177] should_fail_ex+0x262/0x280 [ 2207.135204][T28177] ? sctp_add_bind_addr+0x71/0x1e0 [ 2207.135337][T28177] should_failslab+0x8c/0xb0 [ 2207.135522][T28177] __kmalloc_cache_noprof+0x7a/0x400 [ 2207.135620][T28177] ? sctp_add_bind_addr+0x71/0x1e0 [ 2207.135742][T28177] sctp_add_bind_addr+0x71/0x1e0 [ 2207.135858][T28177] sctp_copy_local_addr_list+0x1b4/0x250 [ 2207.135979][T28177] sctp_copy_one_addr+0x7f/0x280 [ 2207.136127][T28177] sctp_bind_addr_copy+0x79/0x290 [ 2207.136300][T28177] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 2207.136410][T28177] sctp_connect_new_asoc+0x1c3/0x3a0 [ 2207.136501][T28177] sctp_sendmsg+0x105f/0x1d00 [ 2207.136594][T28177] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2207.136668][T28177] inet_sendmsg+0xc5/0xd0 [ 2207.136769][T28177] ? __pfx_inet_sendmsg+0x10/0x10 [ 2207.136868][T28177] ____sys_sendmsg+0x4e8/0x580 [ 2207.136968][T28177] ___sys_sendmsg+0x195/0x1e0 [ 2207.137180][T28177] __sys_sendmmsg+0x185/0x320 [ 2207.137296][T28177] __x64_sys_sendmmsg+0x57/0x70 [ 2207.137396][T28177] x64_sys_call+0x1fb4/0x2550 [ 2207.137526][T28177] do_syscall_64+0x112/0x360 [ 2207.137635][T28177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2207.137714][T28177] RIP: 0033:0x7fa53cfae199 [ 2207.137810][T28177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2207.137875][T28177] RSP: 002b:00007fa53b9e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2207.137948][T28177] RAX: ffffffffffffffda RBX: 00007fa53d236090 RCX: 00007fa53cfae199 [ 2207.138058][T28177] RDX: 0000000000000001 RSI: 0000200000003c40 RDI: 0000000000000006 [ 2207.138109][T28177] RBP: 00007fa53d0458e0 R08: 0000000000000000 R09: 0000000000000000 [ 2207.138153][T28177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2207.138195][T28177] R13: 00007fa53d236128 R14: 00007fa53d236090 R15: 00007ffd45e767d8 [ 2207.138268][T28177] [ 2207.229187][T28179] FAULT_INJECTION: forcing a failure. [ 2207.229187][T28179] name failslab, interval 1, probability 0, space 0, times 0 [ 2207.229343][T28179] CPU: 0 UID: 0 PID: 28179 Comm: syz.8.15806 Not tainted syzkaller #0 PREEMPT(lazy) [ 2207.229423][T28179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2207.229464][T28179] Call Trace: [ 2207.229485][T28179] [ 2207.229514][T28179] __dump_stack+0x1d/0x30 [ 2207.229588][T28179] dump_stack_lvl+0x95/0xd0 [ 2207.229665][T28179] dump_stack+0x15/0x1b [ 2207.229775][T28179] should_fail_ex+0x262/0x280 [ 2207.229876][T28179] ? alloc_fs_context+0x41/0x570 [ 2207.229952][T28179] should_failslab+0x8c/0xb0 [ 2207.230139][T28179] __kmalloc_cache_noprof+0x7a/0x400 [ 2207.230260][T28179] ? ida_alloc_range+0x6f4/0x730 [ 2207.230344][T28179] ? alloc_fs_context+0x41/0x570 [ 2207.230383][T28179] alloc_fs_context+0x41/0x570 [ 2207.230418][T28179] ? fs_context_for_mount+0x11/0x30 [ 2207.230457][T28179] fs_context_for_mount+0x22/0x30 [ 2207.230504][T28179] mq_init_ns+0xac/0x370 [ 2207.230534][T28179] copy_ipcs+0x26d/0x460 [ 2207.230574][T28179] create_new_namespaces+0x121/0x420 [ 2207.230799][T28179] unshare_nsproxy_namespaces+0x115/0x150 [ 2207.230912][T28179] ksys_unshare+0x42b/0x710 [ 2207.231016][T28179] __x64_sys_unshare+0x1f/0x30 [ 2207.231107][T28179] x64_sys_call+0x1e33/0x2550 [ 2207.231195][T28179] do_syscall_64+0x112/0x360 [ 2207.231282][T28179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2207.231369][T28179] RIP: 0033:0x7f04e1c8e199 [ 2207.231493][T28179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2207.231567][T28179] RSP: 002b:00007f04e06e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2207.231662][T28179] RAX: ffffffffffffffda RBX: 00007f04e1f15fa0 RCX: 00007f04e1c8e199 [ 2207.231712][T28179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 2207.231754][T28179] RBP: 00007f04e1d258e0 R08: 0000000000000000 R09: 0000000000000000 [ 2207.231798][T28179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2207.231840][T28179] R13: 00007f04e1f16038 R14: 00007f04e1f15fa0 R15: 00007ffc58e15448 [ 2207.231904][T28179] [ 2207.275127][T28179] FAULT_INJECTION: forcing a failure. [ 2207.275127][T28179] name failslab, interval 1, probability 0, space 0, times 0 [ 2207.275218][T28179] CPU: 0 UID: 0 PID: 28179 Comm: syz.8.15806 Not tainted syzkaller #0 PREEMPT(lazy) [ 2207.275367][T28179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2207.275416][T28179] Call Trace: [ 2207.275437][T28179] [ 2207.275460][T28179] __dump_stack+0x1d/0x30 [ 2207.275514][T28179] dump_stack_lvl+0x95/0xd0 [ 2207.275538][T28179] dump_stack+0x15/0x1b [ 2207.275562][T28179] should_fail_ex+0x262/0x280 [ 2207.275692][T28179] ? shrinker_alloc+0x3b/0x6e0 [ 2207.275775][T28179] should_failslab+0x8c/0xb0 [ 2207.275947][T28179] __kmalloc_cache_noprof+0x7a/0x400 [ 2207.276077][T28179] ? shrinker_alloc+0x3b/0x6e0 [ 2207.276252][T28179] shrinker_alloc+0x3b/0x6e0 [ 2207.276353][T28179] ? __percpu_init_rwsem+0x24/0x90 [ 2207.276423][T28179] ? rcu_sync_init+0x32/0x40 [ 2207.276520][T28179] sget_fc+0x875/0xfa0 [ 2207.276608][T28179] ? __pfx_set_anon_super_fc+0x10/0x10 [ 2207.276801][T28179] ? __kmalloc_cache_noprof+0x19b/0x400 [ 2207.276904][T28179] ? mqueue_init_fs_context+0x38/0x2c0 [ 2207.276973][T28179] ? __pfx_mqueue_fill_super+0x10/0x10 [ 2207.277093][T28179] get_tree_nodev+0x2a/0x100 [ 2207.277191][T28179] mqueue_get_tree+0x5d/0x80 [ 2207.277288][T28179] vfs_get_tree+0x57/0x1d0 [ 2207.277422][T28179] fc_mount_longterm+0x18/0xb0 [ 2207.277521][T28179] mq_init_ns+0x2db/0x370 [ 2207.277615][T28179] copy_ipcs+0x26d/0x460 [ 2207.277787][T28179] create_new_namespaces+0x121/0x420 [ 2207.277944][T28179] unshare_nsproxy_namespaces+0x115/0x150 [ 2207.278055][T28179] ksys_unshare+0x42b/0x710 [ 2207.278145][T28179] __x64_sys_unshare+0x1f/0x30 [ 2207.278228][T28179] x64_sys_call+0x1e33/0x2550 [ 2207.278318][T28179] do_syscall_64+0x112/0x360 [ 2207.278395][T28179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2207.278468][T28179] RIP: 0033:0x7f04e1c8e199 [ 2207.278523][T28179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2207.278645][T28179] RSP: 002b:00007f04e06e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2207.278717][T28179] RAX: ffffffffffffffda RBX: 00007f04e1f15fa0 RCX: 00007f04e1c8e199 [ 2207.278834][T28179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 2207.278873][T28179] RBP: 00007f04e1d258e0 R08: 0000000000000000 R09: 0000000000000000 [ 2207.278936][T28179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2207.278981][T28179] R13: 00007f04e1f16038 R14: 00007f04e1f15fa0 R15: 00007ffc58e15448 [ 2207.279145][T28179] [ 2207.418343][ T29] audit: type=1400 audit(1791315841.274:17784): avc: denied { mounton } for pid=28178 comm="syz.8.15806" path="/491/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 2207.608243][T28179] FAULT_INJECTION: forcing a failure. [ 2207.608243][T28179] name failslab, interval 1, probability 0, space 0, times 0 [ 2207.608373][T28179] CPU: 1 UID: 0 PID: 28179 Comm: syz.8.15806 Not tainted syzkaller #0 PREEMPT(lazy) [ 2207.608474][T28179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2207.608524][T28179] Call Trace: [ 2207.608553][T28179] [ 2207.608576][T28179] __dump_stack+0x1d/0x30 [ 2207.608667][T28179] dump_stack_lvl+0x95/0xd0 [ 2207.608843][T28179] dump_stack+0x15/0x1b [ 2207.608924][T28179] should_fail_ex+0x262/0x280 [ 2207.609126][T28179] ? security_inode_alloc+0x37/0x100 [ 2207.609214][T28179] should_failslab+0x8c/0xb0 [ 2207.609333][T28179] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 2207.609448][T28179] ? security_inode_alloc+0x37/0x100 [ 2207.609560][T28179] security_inode_alloc+0x37/0x100 [ 2207.609672][T28179] inode_init_always_gfp+0x495/0x4e0 [ 2207.609795][T28179] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2207.609941][T28179] alloc_inode+0x58/0x170 [ 2207.610011][T28179] sock_create_lite+0x79/0x290 [ 2207.610124][T28179] __netlink_kernel_create+0x8d/0x550 [ 2207.610220][T28179] xfrm_user_net_init+0x4e/0xc0 [ 2207.610397][T28179] ? __pfx_xfrm_netlink_rcv+0x10/0x10 [ 2207.610589][T28179] ops_init+0x22a/0x2e0 [ 2207.610692][T28179] setup_net+0x9f/0x230 [ 2207.610828][T28179] copy_net_ns+0x333/0x490 [ 2207.610936][T28179] create_new_namespaces+0x1f6/0x420 [ 2207.611048][T28179] unshare_nsproxy_namespaces+0x115/0x150 [ 2207.611185][T28179] ksys_unshare+0x42b/0x710 [ 2207.611279][T28179] __x64_sys_unshare+0x1f/0x30 [ 2207.611378][T28179] x64_sys_call+0x1e33/0x2550 [ 2207.611467][T28179] do_syscall_64+0x112/0x360 [ 2207.611558][T28179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2207.611631][T28179] RIP: 0033:0x7f04e1c8e199 [ 2207.611689][T28179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2207.611781][T28179] RSP: 002b:00007f04e06e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2207.611807][T28179] RAX: ffffffffffffffda RBX: 00007f04e1f15fa0 RCX: 00007f04e1c8e199 [ 2207.611828][T28179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 2207.611846][T28179] RBP: 00007f04e1d258e0 R08: 0000000000000000 R09: 0000000000000000 [ 2207.611860][T28179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2207.611882][T28179] R13: 00007f04e1f16038 R14: 00007f04e1f15fa0 R15: 00007ffc58e15448 [ 2207.611915][T28179] [ 2207.613087][T21252] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2207.783160][T28184] hsr0 speed is unknown, defaulting to 1000 [ 2207.940070][ T29] audit: type=1400 audit(1791315841.804:17785): avc: denied { write } for pid=28189 comm="syz.7.15809" name="functions" dev="configfs" ino=10983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2208.033497][ T29] audit: type=1400 audit(1791315841.884:17786): avc: denied { write } for pid=28189 comm="syz.7.15809" name="c.1" dev="configfs" ino=11152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2208.033603][ T29] audit: type=1400 audit(1791315841.884:17787): avc: denied { write } for pid=28189 comm="syz.7.15809" name="c.1" dev="configfs" ino=11152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2208.067396][ T29] audit: type=1400 audit(1791315841.914:17788): avc: denied { write } for pid=28189 comm="syz.7.15809" name="c.1" dev="configfs" ino=11152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2208.067503][ T29] audit: type=1400 audit(1791315841.914:17789): avc: denied { remove_name } for pid=28189 comm="syz.7.15809" name="ecm.usb0" dev="configfs" ino=192634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2208.399626][T28194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2208.399768][T28194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2208.468057][T28194] FAULT_INJECTION: forcing a failure. [ 2208.468057][T28194] name failslab, interval 1, probability 0, space 0, times 0 [ 2208.468142][T28194] CPU: 1 UID: 0 PID: 28194 Comm: syz.5.15812 Not tainted syzkaller #0 PREEMPT(lazy) [ 2208.468173][T28194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2208.468191][T28194] Call Trace: [ 2208.468200][T28194] [ 2208.468211][T28194] __dump_stack+0x1d/0x30 [ 2208.468240][T28194] dump_stack_lvl+0x95/0xd0 [ 2208.468311][T28194] dump_stack+0x15/0x1b [ 2208.468357][T28194] should_fail_ex+0x262/0x280 [ 2208.468402][T28194] ? trace_define_field+0x8f/0x1d0 [ 2208.468432][T28194] should_failslab+0x8c/0xb0 [ 2208.468491][T28194] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 2208.468531][T28194] ? __rcu_read_unlock+0x4e/0x70 [ 2208.468613][T28194] ? trace_define_field+0x8f/0x1d0 [ 2208.468647][T28194] trace_define_field+0x8f/0x1d0 [ 2208.468767][T28194] uprobe_event_define_fields+0xc0/0x170 [ 2208.468790][T28194] event_define_fields+0x307/0x340 [ 2208.468812][T28194] ? trace_create_new_event+0x186/0x340 [ 2208.468902][T28194] event_create_dir+0x75/0x720 [ 2208.468925][T28194] ? trace_create_new_event+0x306/0x340 [ 2208.468947][T28194] trace_add_event_call+0x22d/0x2f0 [ 2208.469022][T28194] trace_probe_register_event_call+0x232/0x2a0 [ 2208.469090][T28194] register_trace_uprobe+0x494/0xa30 [ 2208.469113][T28194] __trace_uprobe_create+0x98a/0xa40 [ 2208.469166][T28194] ? __pfx___trace_uprobe_create+0x10/0x10 [ 2208.469193][T28194] trace_probe_create+0x87/0xd0 [ 2208.469225][T28194] trace_uprobe_create+0x1c/0x30 [ 2208.469246][T28194] dyn_event_create+0x3e/0x70 [ 2208.469284][T28194] create_or_delete_trace_uprobe+0x54/0x80 [ 2208.469308][T28194] trace_parse_run_command+0x198/0x2d0 [ 2208.469332][T28194] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 2208.469369][T28194] probes_write+0x34/0x50 [ 2208.469428][T28194] ? __pfx_probes_write+0x10/0x10 [ 2208.469454][T28194] vfs_write+0x254/0x9a0 [ 2208.469528][T28194] ? __fget_files+0x184/0x1c0 [ 2208.469560][T28194] ? mutex_lock+0x57/0x90 [ 2208.469648][T28194] ksys_write+0xdc/0x1a0 [ 2208.469690][T28194] __x64_sys_write+0x40/0x50 [ 2208.469720][T28194] x64_sys_call+0x154e/0x2550 [ 2208.469803][T28194] do_syscall_64+0x112/0x360 [ 2208.469909][T28194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2208.469938][T28194] RIP: 0033:0x7f7e98d5e199 [ 2208.469956][T28194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2208.469974][T28194] RSP: 002b:00007f7e977b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2208.469993][T28194] RAX: ffffffffffffffda RBX: 00007f7e98fe5fa0 RCX: 00007f7e98d5e199 [ 2208.470012][T28194] RDX: 000000000000000f RSI: 0000200000000500 RDI: 000000000000000b [ 2208.470085][T28194] RBP: 00007f7e98df58e0 R08: 0000000000000000 R09: 0000000000000000 [ 2208.470104][T28194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2208.470122][T28194] R13: 00007f7e98fe6038 R14: 00007f7e98fe5fa0 R15: 00007ffe4b404a08 [ 2208.470150][T28194] [ 2208.829569][T28205] loop7: detected capacity change from 0 to 256 [ 2208.838393][T28205] vfat: Unknown parameter '1844674407370955161500000000000000000000' [ 2208.847418][T28209] FAULT_INJECTION: forcing a failure. [ 2208.847418][T28209] name failslab, interval 1, probability 0, space 0, times 0 [ 2208.847528][T28209] CPU: 1 UID: 0 PID: 28209 Comm: syz.1.15819 Not tainted syzkaller #0 PREEMPT(lazy) [ 2208.847617][T28209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2208.847684][T28209] Call Trace: [ 2208.847705][T28209] [ 2208.847714][T28209] __dump_stack+0x1d/0x30 [ 2208.847838][T28209] dump_stack_lvl+0x95/0xd0 [ 2208.847917][T28209] dump_stack+0x15/0x1b [ 2208.848081][T28209] should_fail_ex+0x262/0x280 [ 2208.848188][T28209] ? __alloc_skb+0x2e0/0x6f0 [ 2208.848256][T28209] should_failslab+0x8c/0xb0 [ 2208.848389][T28209] kmem_cache_alloc_node_noprof+0x82/0x400 [ 2208.848572][T28209] ? __wake_up+0x88/0xb0 [ 2208.848668][T28209] ? __alloc_skb+0x2e0/0x6f0 [ 2208.848748][T28209] __alloc_skb+0x2e0/0x6f0 [ 2208.848867][T28209] ? __alloc_skb+0x209/0x6f0 [ 2208.848941][T28209] __pfkey_xfrm_state2msg+0x33f/0x13d0 [ 2208.849028][T28209] ? xfrm_send_state_notify+0xd62/0xfa0 [ 2208.849219][T28209] pfkey_send_notify+0x172/0x5c0 [ 2208.849318][T28209] ? __pfx_pfkey_send_notify+0x10/0x10 [ 2208.849408][T28209] km_state_notify+0x5d/0xa0 [ 2208.849523][T28209] pfkey_add+0x1198/0x12b0 [ 2208.849643][T28209] pfkey_sendmsg+0x839/0x970 [ 2208.849683][T28209] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 2208.849711][T28209] ____sys_sendmsg+0x532/0x580 [ 2208.849775][T28209] ___sys_sendmsg+0x195/0x1e0 [ 2208.849818][T28209] __x64_sys_sendmsg+0xd4/0x160 [ 2208.849852][T28209] x64_sys_call+0x22ab/0x2550 [ 2208.849907][T28209] do_syscall_64+0x112/0x360 [ 2208.849939][T28209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2208.850012][T28209] RIP: 0033:0x7fa53cfae199 [ 2208.850087][T28209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2208.850178][T28209] RSP: 002b:00007fa53ba07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2208.850329][T28209] RAX: ffffffffffffffda RBX: 00007fa53d235fa0 RCX: 00007fa53cfae199 [ 2208.850394][T28209] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 2208.850436][T28209] RBP: 00007fa53d0458e0 R08: 0000000000000000 R09: 0000000000000000 [ 2208.850484][T28209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2208.850599][T28209] R13: 00007fa53d236038 R14: 00007fa53d235fa0 R15: 00007ffd45e767d8 [ 2208.850678][T28209] [ 2208.888129][T28205] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15816'. [ 2208.922656][T28205] FAULT_INJECTION: forcing a failure. [ 2208.922656][T28205] name failslab, interval 1, probability 0, space 0, times 0 [ 2208.922755][T28205] CPU: 1 UID: 0 PID: 28205 Comm: syz.7.15816 Not tainted syzkaller #0 PREEMPT(lazy) [ 2208.922897][T28205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2208.922945][T28205] Call Trace: [ 2208.923021][T28205] [ 2208.923052][T28205] __dump_stack+0x1d/0x30 [ 2208.923149][T28205] dump_stack_lvl+0x95/0xd0 [ 2208.923222][T28205] dump_stack+0x15/0x1b [ 2208.923292][T28205] should_fail_ex+0x262/0x280 [ 2208.923450][T28205] ? nf_flow_offload_xdp_setup+0x5d/0x440 [ 2208.923571][T28205] should_failslab+0x8c/0xb0 [ 2208.923747][T28205] __kmalloc_cache_noprof+0x7a/0x400 [ 2208.923864][T28205] ? nf_flow_offload_xdp_setup+0x5d/0x440 [ 2208.923972][T28205] ? nf_hook_entries_grow+0x1cb/0x460 [ 2208.924058][T28205] nf_flow_offload_xdp_setup+0x5d/0x440 [ 2208.924212][T28205] ? nf_flow_table_offload_setup+0x7a/0x3e0 [ 2208.924380][T28205] nf_flow_table_offload_setup+0x87/0x3e0 [ 2208.924560][T28205] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 2208.924731][T28205] nft_register_flowtable_net_hooks+0x252/0x500 [ 2208.924841][T28205] nf_tables_newflowtable+0xf03/0x1490 [ 2208.924964][T28205] nfnetlink_rcv+0xbf7/0x1740 [ 2208.925244][T28205] netlink_unicast+0x5a9/0x680 [ 2208.925360][T28205] netlink_sendmsg+0x5be/0x6f0 [ 2208.925439][T28205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2208.925545][T28205] ____sys_sendmsg+0x532/0x580 [ 2208.925644][T28205] ___sys_sendmsg+0x195/0x1e0 [ 2208.925766][T28205] __x64_sys_sendmsg+0xd4/0x160 [ 2208.925870][T28205] x64_sys_call+0x22ab/0x2550 [ 2208.925971][T28205] do_syscall_64+0x112/0x360 [ 2208.926065][T28205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2208.926141][T28205] RIP: 0033:0x7ff90619e199 [ 2208.926200][T28205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2208.926269][T28205] RSP: 002b:00007ff904bf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2208.926337][T28205] RAX: ffffffffffffffda RBX: 00007ff906425fa0 RCX: 00007ff90619e199 [ 2208.926380][T28205] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 2208.926486][T28205] RBP: 00007ff9062358e0 R08: 0000000000000000 R09: 0000000000000000 [ 2208.926608][T28205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2208.926650][T28205] R13: 00007ff906426038 R14: 00007ff906425fa0 R15: 00007ffeea701b48 [ 2208.926711][T28205] [ 2209.045648][T28182] clocksource: Switched to clocksource acpi_pm [ 2209.475962][T28220] IPVS: rr: FWM 3 0x00000003 - no destination available [ 2209.476126][ C1] IPVS: rr: FWM 3 0x00000003 - no destination available [ 2209.501223][T28222] loop9: detected capacity change from 0 to 2048 [ 2209.558163][T28222] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2209.659470][T25695] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2209.761877][T28234] udc usbip-vudc.0: failed to start g1: -19 [ 2209.762252][T28234] UDC core: g1: couldn't find an available UDC or it's busy [ 2209.778511][T28240] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15831'. [ 2209.779328][T28240] FAULT_INJECTION: forcing a failure. [ 2209.779328][T28240] name failslab, interval 1, probability 0, space 0, times 0 [ 2209.779448][T28240] CPU: 1 UID: 0 PID: 28240 Comm: syz.9.15831 Not tainted syzkaller #0 PREEMPT(lazy) [ 2209.779477][T28240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2209.779490][T28240] Call Trace: [ 2209.779497][T28240] [ 2209.779532][T28240] __dump_stack+0x1d/0x30 [ 2209.779559][T28240] dump_stack_lvl+0x95/0xd0 [ 2209.779582][T28240] dump_stack+0x15/0x1b [ 2209.779606][T28240] should_fail_ex+0x262/0x280 [ 2209.779646][T28240] should_failslab+0x8c/0xb0 [ 2209.779744][T28240] __kvmalloc_node_noprof+0x168/0x5c0 [ 2209.779838][T28240] ? nf_hook_entries_grow+0x1cb/0x460 [ 2209.779864][T28240] ? nf_hook_entries_grow+0x1cb/0x460 [ 2209.779890][T28240] nf_hook_entries_grow+0x1cb/0x460 [ 2209.779974][T28240] ? nf_flow_table_offload_setup+0x87/0x3e0 [ 2209.780032][T28240] __nf_register_net_hook+0x187/0x480 [ 2209.780144][T28240] nf_register_net_hook+0x88/0x130 [ 2209.780168][T28240] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 2209.780204][T28240] nft_register_flowtable_net_hooks+0x272/0x500 [ 2209.780238][T28240] nf_tables_newflowtable+0xf03/0x1490 [ 2209.780345][T28240] nfnetlink_rcv+0xbf7/0x1740 [ 2209.780492][T28240] netlink_unicast+0x5a9/0x680 [ 2209.780531][T28240] netlink_sendmsg+0x5be/0x6f0 [ 2209.780562][T28240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2209.780600][T28240] ____sys_sendmsg+0x532/0x580 [ 2209.780684][T28240] ___sys_sendmsg+0x195/0x1e0 [ 2209.780733][T28240] __x64_sys_sendmsg+0xd4/0x160 [ 2209.780807][T28240] x64_sys_call+0x22ab/0x2550 [ 2209.780837][T28240] do_syscall_64+0x112/0x360 [ 2209.780937][T28240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2209.780966][T28240] RIP: 0033:0x7ff747b3e199 [ 2209.780994][T28240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2209.781076][T28240] RSP: 002b:00007ff746597028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2209.781113][T28240] RAX: ffffffffffffffda RBX: 00007ff747dc5fa0 RCX: 00007ff747b3e199 [ 2209.781129][T28240] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 2209.781141][T28240] RBP: 00007ff747bd58e0 R08: 0000000000000000 R09: 0000000000000000 [ 2209.781208][T28240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2209.781225][T28240] R13: 00007ff747dc6038 R14: 00007ff747dc5fa0 R15: 00007fffc2441778 [ 2209.781248][T28240] [ 2210.155375][T25384] IPVS: starting estimator thread 0... [ 2210.155452][T28251] IPVS: rr: FWM 3 0x00000003 - no destination available [ 2210.230464][T28259] loop8: detected capacity change from 0 to 2048 [ 2210.243696][T28252] IPVS: using max 384 ests per chain, 19200 per kthread [ 2210.267694][T28259] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2210.305310][T17815] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2210.329887][T28265] FAULT_INJECTION: forcing a failure. [ 2210.329887][T28265] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2210.329914][T28265] CPU: 0 UID: 0 PID: 28265 Comm: syz.9.15844 Not tainted syzkaller #0 PREEMPT(lazy) [ 2210.329994][T28265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2210.330013][T28265] Call Trace: [ 2210.330021][T28265] [ 2210.330039][T28265] __dump_stack+0x1d/0x30 [ 2210.330126][T28265] dump_stack_lvl+0x95/0xd0 [ 2210.330183][T28265] dump_stack+0x15/0x1b [ 2210.330213][T28265] should_fail_ex+0x262/0x280 [ 2210.330290][T28265] should_fail_alloc_page+0xf2/0x100 [ 2210.330329][T28265] __alloc_frozen_pages_noprof+0x157/0x400 [ 2210.330366][T28265] alloc_pages_mpol+0xaf/0x1d0 [ 2210.330486][T28265] vma_alloc_folio_noprof+0x1b3/0x300 [ 2210.330515][T28265] handle_mm_fault+0x137d/0x3bb0 [ 2210.330596][T28265] __get_user_pages+0x12e9/0x1eb0 [ 2210.330636][T28265] __mm_populate+0x242/0x390 [ 2210.330663][T28265] do_mlock+0x44d/0x510 [ 2210.330702][T28265] ? _copy_to_user+0x7c/0xa0 [ 2210.330752][T28265] ? put_timespec64+0x80/0xc0 [ 2210.330782][T28265] __x64_sys_mlock+0x4d/0x70 [ 2210.330821][T28265] x64_sys_call+0x2232/0x2550 [ 2210.330926][T28265] do_syscall_64+0x112/0x360 [ 2210.330954][T28265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2210.330985][T28265] RIP: 0033:0x7ff747b3e199 [ 2210.331007][T28265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2210.331033][T28265] RSP: 002b:00007ff746597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 2210.331113][T28265] RAX: ffffffffffffffda RBX: 00007ff747dc5fa0 RCX: 00007ff747b3e199 [ 2210.331157][T28265] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 2210.331175][T28265] RBP: 00007ff747bd58e0 R08: 0000000000000000 R09: 0000000000000000 [ 2210.331193][T28265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2210.331213][T28265] R13: 00007ff747dc6038 R14: 00007ff747dc5fa0 R15: 00007fffc2441778 [ 2210.331311][T28265] [ 2210.816957][T28278] VFS: Mount too revealing [ 2211.017817][T28289] FAULT_INJECTION: forcing a failure. [ 2211.017817][T28289] name failslab, interval 1, probability 0, space 0, times 0 [ 2211.017946][T28289] CPU: 1 UID: 0 PID: 28289 Comm: syz.7.15852 Not tainted syzkaller #0 PREEMPT(lazy) [ 2211.017976][T28289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2211.017989][T28289] Call Trace: [ 2211.017996][T28289] [ 2211.018004][T28289] __dump_stack+0x1d/0x30 [ 2211.018030][T28289] dump_stack_lvl+0x95/0xd0 [ 2211.018121][T28289] dump_stack+0x15/0x1b [ 2211.018150][T28289] should_fail_ex+0x262/0x280 [ 2211.018187][T28289] ? x509_cert_parse+0xe2/0x450 [ 2211.018216][T28289] should_failslab+0x8c/0xb0 [ 2211.018310][T28289] __kmalloc_cache_noprof+0x7a/0x400 [ 2211.018426][T28289] ? x509_cert_parse+0xe2/0x450 [ 2211.018481][T28289] x509_cert_parse+0xe2/0x450 [ 2211.018601][T28289] x509_key_preparse+0x3c/0x420 [ 2211.018629][T28289] asymmetric_key_preparse+0x68/0xb0 [ 2211.018664][T28289] __key_create_or_update+0x29e/0x820 [ 2211.018740][T28289] ? key_task_permission+0x2ac/0x2c0 [ 2211.018784][T28289] key_create_or_update+0x42/0x60 [ 2211.018901][T28289] __se_sys_add_key+0x2a5/0x360 [ 2211.018937][T28289] __x64_sys_add_key+0x67/0x80 [ 2211.018964][T28289] x64_sys_call+0x1fa9/0x2550 [ 2211.018993][T28289] do_syscall_64+0x112/0x360 [ 2211.019115][T28289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2211.019214][T28289] RIP: 0033:0x7ff90619e199 [ 2211.019233][T28289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2211.019256][T28289] RSP: 002b:00007ff904bf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 2211.019337][T28289] RAX: ffffffffffffffda RBX: 00007ff906425fa0 RCX: 00007ff90619e199 [ 2211.019355][T28289] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 2211.019371][T28289] RBP: 00007ff9062358e0 R08: ffffffffffffffff R09: 0000000000000000 [ 2211.019394][T28289] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 2211.019410][T28289] R13: 00007ff906426038 R14: 00007ff906425fa0 R15: 00007ffeea701b48 [ 2211.019455][T28289] [ 2211.099486][T28293] loop1: detected capacity change from 0 to 2048 [ 2211.134544][T28293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2211.154606][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 2211.154644][ T29] audit: type=1400 audit(1791315845.009:17793): avc: denied { write } for pid=28292 comm="syz.1.15853" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2211.312267][T25438] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2211.763042][T28317] IPVS: rr: FWM 3 0x00000003 - no destination available [ 2211.887130][T28323] loop5: detected capacity change from 0 to 2048 [ 2211.924316][T28323] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2211.958543][ T29] audit: type=1400 audit(1791315845.819:17794): avc: denied { write } for pid=28322 comm="syz.5.15865" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2212.021763][ T29] audit: type=1400 audit(1791315845.879:17795): avc: denied { write } for pid=28331 comm="syz.8.15868" name="c.1" dev="configfs" ino=11152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2212.021822][ T29] audit: type=1400 audit(1791315845.879:17796): avc: denied { write } for pid=28331 comm="syz.8.15868" name="c.1" dev="configfs" ino=11152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2212.157467][T24569] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2212.243956][T28338] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15871'. [ 2212.244042][T28338] bond1: option mode: unable to set because the bond device is up [ 2212.261651][T28338] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15871'. [ 2212.261709][T28338] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15871'. [ 2212.637021][T28363] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2212.770255][T28371] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 2212.785448][T28366] loop7: detected capacity change from 0 to 2048 [ 2212.812202][T28366] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2212.840961][T28374] serial 00:03: in use; can't configure [ 2212.868932][ T29] audit: type=1400 audit(1791315846.729:17797): avc: denied { write } for pid=28364 comm="syz.7.15882" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2212.971408][T28377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15885'. [ 2213.061487][T21252] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2213.456415][T28403] netlink: 'syz.5.15896': attribute type 3 has an invalid length. [ 2213.668318][T28413] loop5: detected capacity change from 0 to 2048 [ 2213.699962][T28413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2213.737531][ T29] audit: type=1400 audit(1791315847.599:17798): avc: denied { write } for pid=28410 comm="syz.5.15900" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2213.766936][T28417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2213.767146][T28417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2213.847180][T28424] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 2213.926206][T24569] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2213.942289][T28424] netlink: 'syz.1.15905': attribute type 10 has an invalid length. [ 2213.950765][T28424] syz_tun: entered promiscuous mode [ 2213.987242][T28424] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2214.042495][T28421] md: could not open device unknown-block(1,0). [ 2214.204704][T28432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2214.204849][T28432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2214.467266][T28440] loop1: detected capacity change from 0 to 128 [ 2214.467793][T28440] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2214.489330][T28440] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2214.600357][T25438] FAT-fs (loop1): error, invalid access to FAT (entry 0xffff0000) [ 2214.600396][T25438] FAT-fs (loop1): Filesystem has been set read-only [ 2214.613586][T25438] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2214.784025][T28432] FAULT_INJECTION: forcing a failure. [ 2214.784025][T28432] name failslab, interval 1, probability 0, space 0, times 0 [ 2214.784065][T28432] CPU: 1 UID: 0 PID: 28432 Comm: syz.8.15908 Not tainted syzkaller #0 PREEMPT(lazy) [ 2214.784226][T28432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2214.784245][T28432] Call Trace: [ 2214.784254][T28432] [ 2214.784265][T28432] __dump_stack+0x1d/0x30 [ 2214.784408][T28432] dump_stack_lvl+0x95/0xd0 [ 2214.784445][T28432] dump_stack+0x15/0x1b [ 2214.784473][T28432] should_fail_ex+0x262/0x280 [ 2214.784580][T28432] ? __send_signal_locked+0x1ca/0x7a0 [ 2214.784619][T28432] should_failslab+0x8c/0xb0 [ 2214.784660][T28432] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 2214.784704][T28432] ? __send_signal_locked+0x1ca/0x7a0 [ 2214.784753][T28432] __send_signal_locked+0x1ca/0x7a0 [ 2214.784867][T28432] ? _raw_spin_lock_irqsave+0x58/0xb0 [ 2214.784911][T28432] do_notify_parent+0x55f/0x600 [ 2214.784959][T28432] release_task+0x9bf/0xb90 [ 2214.784994][T28432] do_exit+0xd79/0x1510 [ 2214.785029][T28432] do_group_exit+0xfe/0x140 [ 2214.785064][T28432] ? get_signal+0xe00/0xf10 [ 2214.785140][T28432] get_signal+0xe07/0xf10 [ 2214.785180][T28432] arch_do_signal_or_restart+0x96/0x480 [ 2214.785262][T28432] exit_to_user_mode_loop+0x15d/0x8c0 [ 2214.785310][T28432] do_syscall_64+0x212/0x360 [ 2214.785345][T28432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2214.785372][T28432] RIP: 0033:0x7f04e1c8e199 [ 2214.785452][T28432] Code: Unable to access opcode bytes at 0x7f04e1c8e16f. [ 2214.785466][T28432] RSP: 002b:00007f04e06e70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2214.785493][T28432] RAX: fffffffffffffe00 RBX: 00007f04e1f15fa8 RCX: 00007f04e1c8e199 [ 2214.785512][T28432] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f04e1f15fa8 [ 2214.785530][T28432] RBP: 00007f04e1f15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2214.785549][T28432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2214.785566][T28432] R13: 00007f04e1f16038 R14: 00007ffc58e15360 R15: 00007ffc58e15448 [ 2214.785665][T28432] [ 2214.999642][T28455] FAULT_INJECTION: forcing a failure. [ 2214.999642][T28455] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2214.999693][T28455] CPU: 0 UID: 0 PID: 28455 Comm: syz.8.15919 Not tainted syzkaller #0 PREEMPT(lazy) [ 2214.999755][T28455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2214.999778][T28455] Call Trace: [ 2214.999791][T28455] [ 2214.999853][T28455] __dump_stack+0x1d/0x30 [ 2214.999915][T28455] dump_stack_lvl+0x95/0xd0 [ 2214.999964][T28455] dump_stack+0x15/0x1b [ 2215.000023][T28455] should_fail_ex+0x262/0x280 [ 2215.000057][T28455] should_fail+0xb/0x20 [ 2215.000086][T28455] get_futex_key+0x12d/0xb10 [ 2215.000113][T28455] ? rep_movs_alternative+0x4a/0xa0 [ 2215.000258][T28455] futex_wait_setup+0x49/0x3e0 [ 2215.000327][T28455] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 2215.000382][T28455] ? hrtimer_active+0xe4/0x110 [ 2215.000425][T28455] __futex_wait+0xa9/0x260 [ 2215.000473][T28455] ? __pfx_futex_wake_mark+0x10/0x10 [ 2215.000521][T28455] futex_wait+0x98/0x1c0 [ 2215.000569][T28455] do_futex+0x391/0x460 [ 2215.000645][T28455] ? should_fail_ex+0xdb/0x280 [ 2215.000693][T28455] __se_sys_futex+0x2f6/0x370 [ 2215.000842][T28455] __x64_sys_futex+0x78/0x90 [ 2215.000924][T28455] x64_sys_call+0x22e2/0x2550 [ 2215.000979][T28455] do_syscall_64+0x112/0x360 [ 2215.001025][T28455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2215.001141][T28455] RIP: 0033:0x7f04e1c8e199 [ 2215.001172][T28455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2215.001209][T28455] RSP: 002b:00007f04e06e70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2215.001286][T28455] RAX: ffffffffffffffda RBX: 00007f04e1f15fa8 RCX: 00007f04e1c8e199 [ 2215.001326][T28455] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f04e1f15fa8 [ 2215.001422][T28455] RBP: 00007f04e1f15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2215.001460][T28455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2215.001485][T28455] R13: 00007f04e1f16038 R14: 00007ffc58e15360 R15: 00007ffc58e15448 [ 2215.001525][T28455] [ 2215.065230][T28456] loop9: detected capacity change from 0 to 2048 [ 2215.089860][T28455] FAULT_INJECTION: forcing a failure. [ 2215.089860][T28455] name failslab, interval 1, probability 0, space 0, times 0 [ 2215.089943][T28455] CPU: 0 UID: 0 PID: 28455 Comm: syz.8.15919 Not tainted syzkaller #0 PREEMPT(lazy) [ 2215.090029][T28455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2215.090079][T28455] Call Trace: [ 2215.090108][T28455] [ 2215.090136][T28455] __dump_stack+0x1d/0x30 [ 2215.090217][T28455] dump_stack_lvl+0x95/0xd0 [ 2215.090294][T28455] dump_stack+0x15/0x1b [ 2215.090362][T28455] should_fail_ex+0x262/0x280 [ 2215.090527][T28455] ? ops_init+0x4b/0x2e0 [ 2215.090599][T28455] should_failslab+0x8c/0xb0 [ 2215.090709][T28455] __kmalloc_noprof+0xd0/0x4d0 [ 2215.090883][T28455] ? ops_init+0x4b/0x2e0 [ 2215.090984][T28455] ? __rcu_read_unlock+0x4e/0x70 [ 2215.091110][T28455] ops_init+0x4b/0x2e0 [ 2215.091284][T28455] setup_net+0x9f/0x230 [ 2215.091384][T28455] copy_net_ns+0x333/0x490 [ 2215.091485][T28455] create_new_namespaces+0x1f6/0x420 [ 2215.091566][T28455] unshare_nsproxy_namespaces+0x115/0x150 [ 2215.091670][T28455] ksys_unshare+0x42b/0x710 [ 2215.091765][T28455] __x64_sys_unshare+0x1f/0x30 [ 2215.091858][T28455] x64_sys_call+0x1e33/0x2550 [ 2215.091884][T28455] do_syscall_64+0x112/0x360 [ 2215.091947][T28455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2215.092039][T28455] RIP: 0033:0x7f04e1c8e199 [ 2215.092153][T28455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2215.092215][T28455] RSP: 002b:00007f04e06e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2215.092284][T28455] RAX: ffffffffffffffda RBX: 00007f04e1f15fa0 RCX: 00007f04e1c8e199 [ 2215.092334][T28455] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 2215.092442][T28455] RBP: 00007f04e1d258e0 R08: 0000000000000000 R09: 0000000000000000 [ 2215.092500][T28455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2215.092542][T28455] R13: 00007f04e1f16038 R14: 00007f04e1f15fa0 R15: 00007ffc58e15448 [ 2215.092617][T28455] [ 2215.117365][T28456] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2215.191237][ T29] audit: type=1400 audit(1791315849.049:17799): avc: denied { write } for pid=28453 comm="syz.9.15920" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2215.508653][T28466] hsr0 speed is unknown, defaulting to 1000 [ 2215.561755][T28470] hub 6-0:1.0: USB hub found [ 2215.561854][T28470] hub 6-0:1.0: 8 ports detected [ 2215.569885][T28470] FAULT_INJECTION: forcing a failure. [ 2215.569885][T28470] name failslab, interval 1, probability 0, space 0, times 0 [ 2215.577138][T28470] CPU: 0 UID: 0 PID: 28470 Comm: syz.7.15923 Not tainted syzkaller #0 PREEMPT(lazy) [ 2215.577186][T28470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2215.577264][T28470] Call Trace: [ 2215.577292][T28470] [ 2215.577320][T28470] __dump_stack+0x1d/0x30 [ 2215.577466][T28470] dump_stack_lvl+0x95/0xd0 [ 2215.577531][T28470] dump_stack+0x15/0x1b [ 2215.577572][T28470] should_fail_ex+0x262/0x280 [ 2215.577730][T28470] should_failslab+0x8c/0xb0 [ 2215.577836][T28470] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 2215.578057][T28470] ? kstrdup_const+0x3e/0x50 [ 2215.578140][T28470] ? kstrdup_const+0x3e/0x50 [ 2215.578221][T28470] kstrdup+0x3e/0xd0 [ 2215.578301][T28470] kstrdup_const+0x3e/0x50 [ 2215.578426][T28470] __kernfs_new_node+0x42/0x440 [ 2215.578515][T28470] kernfs_create_dir_ns+0xd0/0x170 [ 2215.578656][T28470] sysfs_create_dir_ns+0xd4/0x1d0 [ 2215.578859][T28470] kobject_add_internal+0x470/0x770 [ 2215.578973][T28470] kobject_add+0xdb/0x150 [ 2215.579079][T28470] ? __kmalloc_cache_noprof+0x19b/0x400 [ 2215.579217][T28470] ? device_add+0x2e8/0x790 [ 2215.579362][T28470] device_add+0x2f6/0x790 [ 2215.579451][T28470] device_register+0x1d/0x30 [ 2215.579571][T28470] usb_hub_create_port_device+0x276/0x790 [ 2215.579676][T28470] hub_probe+0x142b/0x16e0 [ 2215.579772][T28470] usb_probe_interface+0x486/0x700 [ 2215.579873][T28470] ? __pfx_usb_probe_interface+0x10/0x10 [ 2215.580065][T28470] really_probe+0x1ba/0x600 [ 2215.580173][T28470] __driver_probe_device+0x14f/0x1c0 [ 2215.580280][T28470] driver_probe_device+0x37/0x2f0 [ 2215.580401][T28470] __device_attach_driver+0x227/0x330 [ 2215.580493][T28470] ? __pfx___device_attach_driver+0x10/0x10 [ 2215.580670][T28470] bus_for_each_drv+0x1c0/0x230 [ 2215.580748][T28470] __device_attach+0x1d1/0x2a0 [ 2215.580832][T28470] device_attach+0x17/0x20 [ 2215.580922][T28470] proc_ioctl+0x2c8/0x3e0 [ 2215.581037][T28470] proc_ioctl_default+0x71/0xa0 [ 2215.581198][T28470] usbdev_ioctl+0xe16/0x16a0 [ 2215.581320][T28470] ? __pfx_usbdev_ioctl+0x10/0x10 [ 2215.581486][T28470] __se_sys_ioctl+0xce/0x140 [ 2215.581598][T28470] __x64_sys_ioctl+0x43/0x50 [ 2215.581708][T28470] x64_sys_call+0x239d/0x2550 [ 2215.581776][T28470] do_syscall_64+0x112/0x360 [ 2215.581862][T28470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2215.581933][T28470] RIP: 0033:0x7ff90619e199 [ 2215.581989][T28470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2215.582132][T28470] RSP: 002b:00007ff904bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2215.582199][T28470] RAX: ffffffffffffffda RBX: 00007ff906425fa0 RCX: 00007ff90619e199 [ 2215.582242][T28470] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000004 [ 2215.582288][T28470] RBP: 00007ff9062358e0 R08: 0000000000000000 R09: 0000000000000000 [ 2215.582360][T28470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2215.582414][T28470] R13: 00007ff906426038 R14: 00007ff906425fa0 R15: 00007ffeea701b48 [ 2215.582495][T28470] [ 2215.587996][T28461] hsr0 speed is unknown, defaulting to 1000 [ 2215.618687][T28470] kobject: kobject_add_internal failed for usb6-port8 (error: -12 parent: 6-0:1.0) [ 2215.618827][T28470] hub 6-0:1.0: couldn't create port8 device. [ 2215.618945][T28470] hub 6-0:1.0: config failed, out of memory (err -12) [ 2215.826692][T28465] hsr0 speed is unknown, defaulting to 1000 [ 2216.030393][T25695] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2216.198231][T28488] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15929'. [ 2216.318117][T28494] loop1: detected capacity change from 0 to 512 [ 2216.367960][T28494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2216.368140][T28494] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2216.460586][T25438] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2216.569854][T28502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15935'. [ 2216.641660][T28506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15935'. [ 2216.641741][T28506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15935'. [ 2216.932887][T28504] syzkaller0: entered promiscuous mode [ 2216.932941][T28504] syzkaller0: entered allmulticast mode [ 2216.985337][T28518] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15939'. [ 2216.996364][T28502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2217.269649][T28528] loop1: detected capacity change from 0 to 512 [ 2217.313608][T28528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2217.313703][T28528] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2217.385341][T28535] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15946'. [ 2217.426515][T25438] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2217.515063][T28545] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15951'. [ 2217.537071][T28545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2217.585317][T28552] FAULT_INJECTION: forcing a failure. [ 2217.585317][T28552] name failslab, interval 1, probability 0, space 0, times 0 [ 2217.585408][T28552] CPU: 0 UID: 0 PID: 28552 Comm: syz.7.15954 Not tainted syzkaller #0 PREEMPT(lazy) [ 2217.585437][T28552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2217.585454][T28552] Call Trace: [ 2217.585461][T28552] [ 2217.585468][T28552] __dump_stack+0x1d/0x30 [ 2217.585494][T28552] dump_stack_lvl+0x95/0xd0 [ 2217.585579][T28552] dump_stack+0x15/0x1b [ 2217.585609][T28552] should_fail_ex+0x262/0x280 [ 2217.585687][T28552] ? skb_clone+0x151/0x1f0 [ 2217.585748][T28552] should_failslab+0x8c/0xb0 [ 2217.585781][T28552] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 2217.585879][T28552] ? skb_clone+0x151/0x1f0 [ 2217.585922][T28552] skb_clone+0x151/0x1f0 [ 2217.585989][T28552] __netlink_deliver_tap+0x2be/0x510 [ 2217.586031][T28552] netlink_sendskb+0x126/0x150 [ 2217.586165][T28552] netlink_unicast+0x287/0x680 [ 2217.586214][T28552] ctrl_getfamily+0x373/0x3b0 [ 2217.586241][T28552] genl_family_rcv_msg_doit+0x187/0x1f0 [ 2217.586327][T28552] genl_rcv_msg+0x42f/0x470 [ 2217.586354][T28552] ? __pfx_ctrl_getfamily+0x10/0x10 [ 2217.586440][T28552] netlink_rcv_skb+0x11e/0x220 [ 2217.586465][T28552] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2217.586510][T28552] genl_rcv+0x28/0x40 [ 2217.586539][T28552] netlink_unicast+0x5a9/0x680 [ 2217.586614][T28552] netlink_sendmsg+0x5be/0x6f0 [ 2217.586700][T28552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2217.586745][T28552] __sys_sendto+0x411/0x470 [ 2217.586804][T28552] __x64_sys_sendto+0x76/0x90 [ 2217.586847][T28552] x64_sys_call+0x200c/0x2550 [ 2217.586953][T28552] do_syscall_64+0x112/0x360 [ 2217.587056][T28552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2217.587101][T28552] RIP: 0033:0x7ff90615e9ce [ 2217.587168][T28552] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2217.587201][T28552] RSP: 002b:00007ff904bf5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2217.587280][T28552] RAX: ffffffffffffffda RBX: 00007ff904bf76c0 RCX: 00007ff90615e9ce [ 2217.587372][T28552] RDX: 0000000000000024 RSI: 00007ff904bf6000 RDI: 0000000000000004 [ 2217.587392][T28552] RBP: 0000000000000000 R08: 00007ff904bf5f04 R09: 000000000000000c [ 2217.587429][T28552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2217.587454][T28552] R13: 00007ff904bf5f58 R14: 00007ff904bf6000 R15: 0000000000000000 [ 2217.587482][T28552] [ 2218.005248][T28566] loop8: detected capacity change from 0 to 512 [ 2218.038944][T28566] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2218.039129][T28566] ext4 filesystem being mounted at /519/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2218.133359][T28576] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15964'. [ 2218.133491][T28576] bond1: option mode: unable to set because the bond device is up [ 2218.137677][T17815] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2218.157109][T28577] loop9: detected capacity change from 0 to 1024 [ 2218.162009][T28577] EXT4-fs: inline encryption not supported [ 2218.201488][T28577] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 2218.201682][T28577] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2218.234476][ T29] audit: type=1400 audit(1791315852.099:17800): avc: denied { write } for pid=28575 comm="syz.9.15965" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2218.287933][T28588] netlink: 34 bytes leftover after parsing attributes in process `syz.5.15969'. [ 2218.299386][T28589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15970'. [ 2218.359289][T12237] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm kworker/u8:14: bg 0: block 112: padding at end of block bitmap is not set [ 2218.359906][T12237] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 2218.359962][T12237] EXT4-fs (loop9): This should not happen!! Data will be lost [ 2218.359962][T12237] [ 2218.359999][T12237] EXT4-fs (loop9): Total free blocks count 0 [ 2218.360028][T12237] EXT4-fs (loop9): Free/Dirty block details [ 2218.360177][T12237] EXT4-fs (loop9): free_blocks=0 [ 2218.360215][T12237] EXT4-fs (loop9): dirty_blocks=16 [ 2218.360239][T12237] EXT4-fs (loop9): Block reservation details [ 2218.360268][T12237] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 2218.362074][T25695] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 2218.716187][T28604] bond1: option mode: unable to set because the bond device is up [ 2218.882074][T28615] loop5: detected capacity change from 0 to 1024 [ 2218.887890][T28615] EXT4-fs: inline encryption not supported [ 2218.914789][T28615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 2218.915053][T28615] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2218.936587][ T29] audit: type=1400 audit(1791315852.789:17801): avc: denied { write } for pid=28612 comm="syz.5.15981" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2218.975915][T17434] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm kworker/u8:0: bg 0: block 112: padding at end of block bitmap is not set [ 2218.976487][T17434] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 2218.976541][T17434] EXT4-fs (loop5): This should not happen!! Data will be lost [ 2218.976541][T17434] [ 2218.976565][T17434] EXT4-fs (loop5): Total free blocks count 0 [ 2218.976608][T17434] EXT4-fs (loop5): Free/Dirty block details [ 2218.976621][T17434] EXT4-fs (loop5): free_blocks=0 [ 2218.976692][T17434] EXT4-fs (loop5): dirty_blocks=16 [ 2218.976707][T17434] EXT4-fs (loop5): Block reservation details [ 2218.976717][T17434] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 2218.987095][T24569] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 2219.217468][T28624] FAULT_INJECTION: forcing a failure. [ 2219.217468][T28624] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2219.217580][T28624] CPU: 0 UID: 0 PID: 28624 Comm: syz.7.15986 Not tainted syzkaller #0 PREEMPT(lazy) [ 2219.217642][T28624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2219.217668][T28624] Call Trace: [ 2219.217678][T28624] [ 2219.217717][T28624] __dump_stack+0x1d/0x30 [ 2219.217798][T28624] dump_stack_lvl+0x95/0xd0 [ 2219.217916][T28624] dump_stack+0x15/0x1b [ 2219.217943][T28624] should_fail_ex+0x262/0x280 [ 2219.217973][T28624] should_fail+0xb/0x20 [ 2219.218022][T28624] get_futex_key+0x12d/0xb10 [ 2219.218082][T28624] ? rep_movs_alternative+0x4a/0xa0 [ 2219.218165][T28624] futex_wait_setup+0x49/0x3e0 [ 2219.218212][T28624] ? __cgroup_account_cputime+0x83/0xa0 [ 2219.218286][T28624] ? update_se+0xc1/0x3b0 [ 2219.218369][T28624] ? raw_irqentry_exit_cond_resched+0x3b/0x60 [ 2219.218465][T28624] __futex_wait+0xa9/0x260 [ 2219.218510][T28624] ? __pfx_futex_wake_mark+0x10/0x10 [ 2219.218570][T28624] futex_wait+0x98/0x1c0 [ 2219.218735][T28624] do_futex+0x391/0x460 [ 2219.218812][T28624] ? should_fail_ex+0xdb/0x280 [ 2219.218878][T28624] __se_sys_futex+0x2f6/0x370 [ 2219.219026][T28624] __x64_sys_futex+0x78/0x90 [ 2219.219094][T28624] x64_sys_call+0x22e2/0x2550 [ 2219.219169][T28624] do_syscall_64+0x112/0x360 [ 2219.219290][T28624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2219.219341][T28624] RIP: 0033:0x7ff90619e199 [ 2219.219418][T28624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2219.219543][T28624] RSP: 002b:00007ff904bf70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2219.219614][T28624] RAX: ffffffffffffffda RBX: 00007ff906425fa8 RCX: 00007ff90619e199 [ 2219.219649][T28624] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff906425fa8 [ 2219.219693][T28624] RBP: 00007ff906425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2219.219713][T28624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2219.219744][T28624] R13: 00007ff906426038 R14: 00007ffeea701a60 R15: 00007ffeea701b48 [ 2219.219854][T28624] [ 2219.310814][T28624] FAULT_INJECTION: forcing a failure. [ 2219.310814][T28624] name failslab, interval 1, probability 0, space 0, times 0 [ 2219.310917][T28624] CPU: 0 UID: 0 PID: 28624 Comm: syz.7.15986 Not tainted syzkaller #0 PREEMPT(lazy) [ 2219.310996][T28624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2219.311037][T28624] Call Trace: [ 2219.311064][T28624] [ 2219.311096][T28624] __dump_stack+0x1d/0x30 [ 2219.311222][T28624] dump_stack_lvl+0x95/0xd0 [ 2219.311299][T28624] dump_stack+0x15/0x1b [ 2219.311367][T28624] should_fail_ex+0x262/0x280 [ 2219.311479][T28624] ? __proc_create+0x3f1/0x6b0 [ 2219.311625][T28624] should_failslab+0x8c/0xb0 [ 2219.311763][T28624] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 2219.311918][T28624] ? __proc_create+0x3f1/0x6b0 [ 2219.312016][T28624] __proc_create+0x3f1/0x6b0 [ 2219.312122][T28624] proc_create_reg+0x87/0xe0 [ 2219.312236][T28624] ? __pfx_tls_statistics_seq_show+0x10/0x10 [ 2219.312315][T28624] proc_create_net_single+0x51/0xf0 [ 2219.312418][T28624] tls_proc_init+0x3d/0x50 [ 2219.312506][T28624] tls_init_net+0x4e/0xa0 [ 2219.312637][T28624] ops_init+0x22a/0x2e0 [ 2219.312755][T28624] setup_net+0x9f/0x230 [ 2219.312864][T28624] copy_net_ns+0x333/0x490 [ 2219.313033][T28624] create_new_namespaces+0x1f6/0x420 [ 2219.313204][T28624] unshare_nsproxy_namespaces+0x115/0x150 [ 2219.313317][T28624] ksys_unshare+0x42b/0x710 [ 2219.313475][T28624] __x64_sys_unshare+0x1f/0x30 [ 2219.313589][T28624] x64_sys_call+0x1e33/0x2550 [ 2219.313761][T28624] do_syscall_64+0x112/0x360 [ 2219.313852][T28624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2219.313931][T28624] RIP: 0033:0x7ff90619e199 [ 2219.313983][T28624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2219.314121][T28624] RSP: 002b:00007ff904bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2219.314269][T28624] RAX: ffffffffffffffda RBX: 00007ff906425fa0 RCX: 00007ff90619e199 [ 2219.314327][T28624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 2219.314369][T28624] RBP: 00007ff9062358e0 R08: 0000000000000000 R09: 0000000000000000 [ 2219.314419][T28624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2219.314506][T28624] R13: 00007ff906426038 R14: 00007ff906425fa0 R15: 00007ffeea701b48 [ 2219.314569][T28624] [ 2219.446185][T28632] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 2219.602687][T28637] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2219.720451][T28633] hsr0 speed is unknown, defaulting to 1000 [ 2219.750776][T28634] hsr0 speed is unknown, defaulting to 1000 [ 2219.878401][T28640] hsr0 speed is unknown, defaulting to 1000 [ 2220.103825][T28656] loop1: detected capacity change from 0 to 1024 [ 2220.104402][T28656] EXT4-fs: inline encryption not supported [ 2220.143500][T28656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 2220.143631][T28656] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2220.187932][ T29] audit: type=1400 audit(1791315854.049:17802): avc: denied { write } for pid=28654 comm="syz.1.15995" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2220.252191][T20790] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm kworker/u8:6: bg 0: block 112: padding at end of block bitmap is not set [ 2220.255876][T20790] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 2220.255958][T20790] EXT4-fs (loop1): This should not happen!! Data will be lost [ 2220.255958][T20790] [ 2220.256000][T20790] EXT4-fs (loop1): Total free blocks count 0 [ 2220.256040][T20790] EXT4-fs (loop1): Free/Dirty block details [ 2220.256079][T20790] EXT4-fs (loop1): free_blocks=0 [ 2220.256113][T20790] EXT4-fs (loop1): dirty_blocks=16 [ 2220.256201][T20790] EXT4-fs (loop1): Block reservation details [ 2220.256241][T20790] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 2220.264793][T25438] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 2220.590113][T28691] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2220.691602][T28700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2220.691868][T28700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2220.811618][T28711] loop1: detected capacity change from 0 to 128 [ 2220.812246][T28711] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2220.824423][T28711] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2220.869114][T28711] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2220.869147][T28711] FAT-fs (loop1): Filesystem has been set read-only [ 2220.891923][T28711] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2220.896841][T28711] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2220.902257][T28711] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2221.027571][T28725] bond1: option mode: unable to set because the bond device is up [ 2221.102226][T28729] bond0: (slave syz_tun): Releasing backup interface [ 2221.122238][T28729] bridge0: port 1(syz_tun) entered blocking state [ 2221.122282][T28729] bridge0: port 1(syz_tun) entered disabled state [ 2221.122394][T28729] syz_tun: entered allmulticast mode [ 2221.144915][T20674] syz1: Port: 1 Link DOWN [ 2221.256526][T28741] __nla_validate_parse: 15 callbacks suppressed [ 2221.256547][T28741] netlink: 16 bytes leftover after parsing attributes in process `syz.5.16033'. [ 2221.290962][T28745] netlink: 40 bytes leftover after parsing attributes in process `syz.7.16035'. [ 2221.309404][T28745] netlink: 64 bytes leftover after parsing attributes in process `syz.7.16035'. [ 2221.334575][T28749] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16037'. [ 2221.378127][T28753] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16039'. [ 2221.378160][T28753] bond1: option mode: unable to set because the bond device is up [ 2221.389976][T28753] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16039'. [ 2221.390011][T28753] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16039'. [ 2221.455428][T28761] FAULT_INJECTION: forcing a failure. [ 2221.455428][T28761] name failslab, interval 1, probability 0, space 0, times 0 [ 2221.455481][T28761] CPU: 1 UID: 0 PID: 28761 Comm: syz.5.16041 Not tainted syzkaller #0 PREEMPT(lazy) [ 2221.455518][T28761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2221.455538][T28761] Call Trace: [ 2221.455547][T28761] [ 2221.455610][T28761] __dump_stack+0x1d/0x30 [ 2221.455680][T28761] dump_stack_lvl+0x95/0xd0 [ 2221.455713][T28761] dump_stack+0x15/0x1b [ 2221.455743][T28761] should_fail_ex+0x262/0x280 [ 2221.455783][T28761] should_failslab+0x8c/0xb0 [ 2221.455901][T28761] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 2221.455964][T28761] ? x509_cert_parse+0x1fd/0x450 [ 2221.455992][T28761] ? x509_cert_parse+0x1fd/0x450 [ 2221.456081][T28761] kmemdup_noprof+0x2b/0x70 [ 2221.456112][T28761] x509_cert_parse+0x1fd/0x450 [ 2221.456204][T28761] x509_key_preparse+0x3c/0x420 [ 2221.456236][T28761] ? selinux_key_permission+0x161/0x190 [ 2221.456329][T28761] asymmetric_key_preparse+0x68/0xb0 [ 2221.456400][T28761] __key_create_or_update+0x29e/0x820 [ 2221.456467][T28761] ? key_task_permission+0x2ac/0x2c0 [ 2221.456517][T28761] key_create_or_update+0x42/0x60 [ 2221.456584][T28761] __se_sys_add_key+0x2a5/0x360 [ 2221.456621][T28761] __x64_sys_add_key+0x67/0x80 [ 2221.456654][T28761] x64_sys_call+0x1fa9/0x2550 [ 2221.456690][T28761] do_syscall_64+0x112/0x360 [ 2221.456807][T28761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2221.456916][T28761] RIP: 0033:0x7f7e98d5e199 [ 2221.456939][T28761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2221.456965][T28761] RSP: 002b:00007f7e977b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 2221.456993][T28761] RAX: ffffffffffffffda RBX: 00007f7e98fe5fa0 RCX: 00007f7e98d5e199 [ 2221.457014][T28761] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 2221.457045][T28761] RBP: 00007f7e98df58e0 R08: ffffffffffffffff R09: 0000000000000000 [ 2221.457124][T28761] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 2221.457142][T28761] R13: 00007f7e98fe6038 R14: 00007f7e98fe5fa0 R15: 00007ffe4b404a08 [ 2221.457170][T28761] [ 2221.716704][T28770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2221.716936][T28770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2221.767624][T28777] netlink: 40 bytes leftover after parsing attributes in process `syz.5.16052'. [ 2221.768346][T28777] netlink: 64 bytes leftover after parsing attributes in process `syz.5.16052'. [ 2221.812020][T28782] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16053'. [ 2221.872898][T28786] bond0: left promiscuous mode [ 2221.873505][T28786] netlink: 'syz.9.16056': attribute type 10 has an invalid length. [ 2221.879358][T28786] syz_tun: entered promiscuous mode [ 2221.908790][T28786] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2222.058550][T28811] loop8: detected capacity change from 0 to 256 [ 2222.060691][T28811] vfat: Unknown parameter '1844674407370955161500000000000000000000' [ 2222.292196][T28830] loop1: detected capacity change from 0 to 2048 [ 2222.322197][T28834] loop5: detected capacity change from 0 to 256 [ 2222.329607][T28834] vfat: Unknown parameter '1844674407370955161500000000000000000000' [ 2222.358323][T28830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2222.429000][ T29] audit: type=1400 audit(1791315856.289:17803): avc: denied { write } for pid=28829 comm="syz.1.16076" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2222.607684][T28847] syzkaller0: entered promiscuous mode [ 2222.607708][T28847] syzkaller0: entered allmulticast mode [ 2222.817937][T25438] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2222.920905][T28867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2222.921041][T28867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2222.933950][T28868] loop9: detected capacity change from 0 to 256 [ 2222.939046][T28868] vfat: Unknown parameter '1844674407370955161500000000000000000000' [ 2223.120878][T28886] syzkaller0: entered promiscuous mode [ 2223.120903][T28886] syzkaller0: entered allmulticast mode [ 2223.136429][T28888] loop5: detected capacity change from 0 to 2048 [ 2223.141565][T28890] netlink: 'syz.9.16102': attribute type 10 has an invalid length. [ 2223.169820][T28888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2223.199870][ T29] audit: type=1400 audit(1791315857.059:17804): avc: denied { write } for pid=28887 comm="syz.5.16101" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2223.614808][T24569] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2223.653325][T28917] loop8: detected capacity change from 0 to 128 [ 2223.653817][T28917] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2223.659762][T28917] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2223.721110][T28918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2223.749340][T28918] bond1: (slave bond0): Enslaving as an active interface with a down link [ 2223.774375][T17815] FAT-fs (loop8): error, invalid access to FAT (entry 0xffff0000) [ 2223.774457][T17815] FAT-fs (loop8): Filesystem has been set read-only [ 2223.787603][T17815] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2223.803440][T28918] netlink: 'syz.1.16114': attribute type 10 has an invalid length. [ 2223.803604][T28918] syz_tun: left allmulticast mode [ 2223.803987][T28918] bridge0: port 1(syz_tun) entered disabled state [ 2223.852821][T28918] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2223.855328][T20673] syz1: Port: 1 Link ACTIVE [ 2223.878969][T28925] syzkaller0: entered promiscuous mode [ 2223.879026][T28925] syzkaller0: entered allmulticast mode [ 2223.950070][T28932] loop7: detected capacity change from 0 to 2048 [ 2223.972672][T12237] bond1: (slave bond0): link status definitely up, 10000 Mbps full duplex [ 2223.972794][T12237] bond1: (slave bond0): making interface the new active one [ 2223.978145][T12237] bond1: active interface up! [ 2223.983244][T28932] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2223.990894][ T29] audit: type=1400 audit(1791315857.849:17805): avc: denied { write } for pid=28931 comm="syz.7.16123" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2224.089580][T28938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2224.089878][T28938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2224.203479][T21252] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2224.413033][T28961] netlink: 'syz.9.16132': attribute type 10 has an invalid length. [ 2224.494561][T28965] loop9: detected capacity change from 0 to 512 [ 2224.515801][T28965] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2224.558305][ T29] audit: type=1400 audit(1791315858.419:17806): avc: denied { write } for pid=28964 comm="syz.9.16134" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2224.584926][ T29] audit: type=1400 audit(1791315858.429:17807): avc: denied { write } for pid=28964 comm="syz.9.16134" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2224.617116][T25695] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2224.886111][T28970] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2225.098850][T28990] bond1: (slave bond0): Releasing active interface [ 2225.123358][T28990] netlink: 'syz.1.16144': attribute type 10 has an invalid length. [ 2225.271827][T28957] bond0: (slave syz_tun): Releasing backup interface [ 2225.342671][T28957] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2225.460541][T29001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2225.460705][T29001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2225.847132][T29017] loop7: detected capacity change from 0 to 512 [ 2225.882810][T29017] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2225.908799][ T29] audit: type=1400 audit(1791315859.769:17808): avc: denied { write } for pid=29016 comm="syz.7.16157" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2225.946518][T29021] netlink: 'syz.8.16158': attribute type 10 has an invalid length. [ 2225.965633][T29021] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2225.968535][T21252] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2226.206684][T29036] loop5: detected capacity change from 0 to 2048 [ 2226.206813][T29039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2226.207343][T29039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2226.232835][T29039] netlink: 'syz.1.16165': attribute type 39 has an invalid length. [ 2226.273557][T29036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2226.298790][ T29] audit: type=1400 audit(1791315860.159:17809): avc: denied { write } for pid=29035 comm="syz.5.16164" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2226.407012][T24569] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2226.558767][T29058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2226.558918][T29058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2226.898940][T29084] sctp: [Deprecated]: syz.5.16185 (pid 29084) Use of int in max_burst socket option deprecated. [ 2226.898940][T29084] Use struct sctp_assoc_value instead [ 2226.944536][T29080] loop7: detected capacity change from 0 to 2048 [ 2226.978432][ T2987] ================================================================== [ 2226.978469][ T2987] BUG: KCSAN: data-race in d_make_discardable / lookup_fast [ 2226.978519][ T2987] [ 2226.978527][ T2987] write to 0xffff888100663f00 of 4 bytes by task 27839 on cpu 0: [ 2226.978549][ T2987] d_make_discardable+0x4f/0x90 [ 2226.978579][ T2987] simple_unlink+0x68/0x80 [ 2226.978601][ T2987] shmem_unlink+0x12d/0x140 [ 2226.978631][ T2987] vfs_unlink+0x1c3/0x490 [ 2226.978654][ T2987] filename_unlinkat+0x1dc/0x410 [ 2226.978675][ T2987] __se_sys_unlink+0x2b/0xe0 [ 2226.978712][ T2987] __x64_sys_unlink+0x1f/0x30 [ 2226.978736][ T2987] x64_sys_call+0x18ee/0x2550 [ 2226.978770][ T2987] do_syscall_64+0x112/0x360 [ 2226.978800][ T2987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2226.978823][ T2987] [ 2226.978829][ T2987] read to 0xffff888100663f00 of 4 bytes by task 2987 on cpu 1: [ 2226.978845][ T2987] lookup_fast+0xf1/0x320 [ 2226.978877][ T2987] path_lookupat+0x120/0x4c0 [ 2226.978912][ T2987] filename_lookup+0x18f/0x390 [ 2226.978944][ T2987] do_readlinkat+0x74/0x2f0 [ 2226.978979][ T2987] __x64_sys_readlink+0x47/0x60 [ 2226.979003][ T2987] x64_sys_call+0x1d41/0x2550 [ 2226.979027][ T2987] do_syscall_64+0x112/0x360 [ 2226.979053][ T2987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2226.979081][ T2987] [ 2226.979086][ T2987] value changed: 0x08300080 -> 0x00004080 [ 2226.979102][ T2987] [ 2226.979107][ T2987] Reported by Kernel Concurrency Sanitizer on: [ 2226.979123][ T2987] CPU: 1 UID: 0 PID: 2987 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 2226.979153][ T2987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2226.979184][ T2987] ================================================================== [ 2226.980737][T29080] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2227.009316][ T29] audit: type=1400 audit(1791315860.869:17810): avc: denied { write } for pid=29079 comm="syz.7.16183" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2227.140228][T21252] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.