last executing test programs: 2m50.598036582s ago: executing program 1 (id=1408): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000080)) 2m50.597079082s ago: executing program 1 (id=1409): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xc0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x6}, 0x10000, 0x80000080, 0x0, 0x4, 0x800000, 0x44, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x84) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x40801, 0x0) r4 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x20000008}) ioctl$TCSBRKP(r3, 0x5425, 0x3) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_nanosleep(0x4, 0x1, &(0x7f0000000380)={r5, r6+10000000}, &(0x7f00000003c0)) syz_emit_ethernet(0x31, &(0x7f00000007c0)=ANY=[@ANYBLOB="fffffff4060000000000000088ca5b500028003a00000000000001000001000012670000001122330000000000000000005de5f7c4bbb5f0c9340ec7f37d55fd0e08502e9a20b993d9cdc700d34b74df6a594cf56887959f398dbe15c8f35267319b359e5340f2db9611fb2e415d93ef6a930b98f226e5bc626a2737eb0802594c8b4f8714ea8b98601758c4800ad8e8b7c3e558847120bb4246c3872c752b8c93aa2b80f92eb4467a8d4ad20fde7fe71f188d019736e66dcb8e0c2c7ec1d7"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000580)=ANY=[], 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="52bf0ed0", @ANYRES16=r0, @ANYBLOB="010028bd7000fcdbdf25010000000000000002410000001000136574683a73797a5f74756e00"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2130000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="400800000514100025bd7000fddbdf25080001000100000008000300040000000800010001000000080003000100000008000100010000000800030000000000"], 0x40}, 0x1, 0x0, 0x0, 0x24048081}, 0x20000000) r7 = socket(0x1e, 0x5, 0x0) connect$tipc(r7, &(0x7f0000000700)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) 2m49.451281449s ago: executing program 1 (id=1415): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000000c0)=0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4784549467bab0c1) setsockopt(r1, 0x0, 0xc, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000100)={0x0, 0x0, 0x10000, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000980)='10', 0x2) kexec_load(0x20000000, 0x1, &(0x7f00000009c0)=[{0x0, 0x0, 0x200000000, 0x3e0000}], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000140), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000002c0)={[{@nouid32}, {@nodiscard}, {@noquota}, {@orlov}, {@mblk_io_submit}]}, 0xfe, 0x255, &(0x7f0000000300)="$eJzs3T1oJGUcBvBnZnc9c7fIeTaC+AEiooFwdoLN2SgcyHGICCqciFio3Alngl3WysZCa5VUNkHsjJaSJtgoglXUFLERNFgYLLRY2Z1EYrKicTcz4vx+MDszOx//d9h93neb2QnQWmeTXEjSSTKfpJekOLjDXdV0dm91ZW7jSjIcPv5TMd6vWq/sH3cmySDJg0nWyyIvdZOltae3f9l89N43F3v3vL/21FytF7lnZ3vrsd33Lr3x0cUHlr746odLRS6k/6frmr1iwnvdIjl3EsX+I4pu0y3gn7j82odfj3J/S5K7x/nvpUz14b11/Yb1Xu5/96+OffvHL2+rs63A7A2HvdEYOBgCrVMm6acoF5JUy2W5sFD9hv+mc7p8+dr1V+dfuLZ49fmmeypgVvrJ1iOfnPr4zKH8f9+p8g/8f43y/8Tl1W9Hy7udplsD1OL2ajbK//yzy/dF/qF15B/aS/6hvY6X/7KWNgH1MP5De8k/tNeU+X/xJNoEzEhvf2EwcbPxH9pL/qG95B/a62D+AYB2GZ4az84lTd+JDNSt6f4HAAAAAAAAAAAAAAAAAAA4amVu48r+VFfNz95Jdh5O0p1Uv7P31JEbx6+nfy5Gu/2hqA6byjN3TnmCKX3Q8N3XN33XbP3P72i2/vLVZPB6kvPd7tHvXzH1U29u/pvtveemLHBMxaH1h56st/5hv602W//iZvLpqP85P6n/KXPreD65/+kf/Ivlf+mVX6c8AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALX5PQAA//9FJ2ZS") r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000200000000000cb000000000000000000000000000000000000000000000000000000050000000009000000000000ffffffffffffffff00810000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000ff070000000000000a00"/192]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f0000000740)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000780)='GPL\x00', 0x5, 0x9c, &(0x7f00000007c0)=""/156, 0x40f00, 0x40}, 0x94) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x114) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, 0x0) 2m49.076555557s ago: executing program 1 (id=1421): bpf$ENABLE_STATS(0x20, 0x0, 0x0) unshare(0x26020480) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='cgroup\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x10040, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES32=r0], &(0x7f0000000c00)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000000c0)=@urb_type_control={0x2, {0xf}, 0x2, 0x0, &(0x7f0000000140)={0x60, 0xf, 0x25, 0x3, 0x4}, 0x8, 0x7, 0x32e7, 0x0, 0x7fffffff, 0x2, &(0x7f0000000240)}) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$selinux_load(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0xfebc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4041}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x4004) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x2000c16, &(0x7f0000000540)={[{@usrquota}, {@noquota}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") 2m48.633601333s ago: executing program 1 (id=1425): timer_create(0x5, 0x0, &(0x7f00000000c0)=0x0) timer_delete(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./mysys\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, 0x0, 0x0) getrlimit(0x1, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2400c800) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=' ', &(0x7f0000000080), 0x4af, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, &(0x7f0000000180)=""/231, &(0x7f0000000280), &(0x7f00000002c0), 0x2, r3}, 0x38) mkdir(&(0x7f0000000100)='./file0\x00', 0x2) timer_getoverrun(r0) 2m48.427134014s ago: executing program 1 (id=1426): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000700)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) 2m33.113606948s ago: executing program 32 (id=1426): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000700)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) 7.911715322s ago: executing program 5 (id=2749): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x34, 0x0, 0xfffffffffffffffd}, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0xc, 0x0, 0x0, 0x2, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x13, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x28) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) semget(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x56fe7ccb8faa4bd0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000003c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$msr(0xffffffffffffffff, &(0x7f0000003cc0)=""/102377, 0x18fef) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001ccc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3, 0x9, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f000001cd40)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="2d0000dc5fdf842282bd2000", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) set_mempolicy(0x4005, 0x0, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x1442, &(0x7f000001cd80)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "18d830", 0x140c, 0x2f, 0x0, @loopback, @local, {[@hopopts={0x1, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x6}, @ra={0x5, 0x2, 0xf}]}, @hopopts={0x33, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x1000}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @jumbo={0xc2, 0x4, 0x3}, @pad1]}, @hopopts={0x73, 0x3, '\x00', [@hao={0xc9, 0x10, @private1}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0xfffffffb}]}, @fragment={0x88, 0x0, 0x6, 0x0, 0x0, 0x2, 0x65}, @dstopts={0x29, 0x7, '\x00', [@pad1, @pad1, @calipso={0x7, 0x20, {0x0, 0x6, 0x1, 0x10, [0x800000000, 0x8000000000000001, 0x7]}}, @hao={0xc9, 0x10, @empty}]}, @dstopts={0x3b, 0x220, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xb, 0xe7, "72183faf7bce787bab1c2560fa70a1b3203723ad85e4a7688675b5086acbcd9e119159b2e6e2ddfffc59dd24bef719988f4294b739ecbdd50cca0fab27f557734a3d40faaedd77684c556353f761dfd7e560e62b62189bb203faae53ed8070fe83b3aba7e7954592fa77858ad2ffffd15e981de06b6502c2a9846350fd2dbd5004c80716b558cfdacff23fd291e1be4de592275aa7a1091b3dd034abe9ce040cc2d09cd3bb993d1acb625799dde5bd9eefbf43b133aaa91738f842c2d06e588ba1794d1cd944a0c1920d2449ec18a3ed70a457516eff549f8215c118adab8acce63356c5a800f0"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x6, 0x1000, "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"}]}, @dstopts={0x0, 0xe, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x3, 0xfffd, [0x7, 0x3, 0x10001, 0x5]}}, @calipso={0x7, 0x40, {0x1, 0xe, 0x3, 0x1000, [0x18b, 0x0, 0x8, 0x6, 0x3, 0x2, 0xffffffffffffffc0]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x6b, 0x0, [], "47a17255f429f17948b3877131fe19b9d6502a60a4e8879b886c4ae81cd7a680cf8fccff353d9b20931d704cc02488c253b69d75a787b2817deab2503def769cf3934e759b2a5f1a79d3d63020d4998ab2886d39f4654b9276d9254ba8297d40aed7fb47f4ae39361ef3e8"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "7d69f2eaef3616477299c37dc3c6789527999dd2fd04715f6a6d6ed34fd54412c081b01343d3136c8035abf59f239fd583e7ccd7975ca0cbc70d75af70bf18a1dbc67acc8acc50341bf2437a8a8c370a13424e6a8fb2475d8cc110af5056b3aa5161be56f05584f3b200c904e493d7a6214506a17e0ccca75f2e1cbf00ea9ca61ea497fe06fa1d07e5ee34bd350b76f22898cd91c6e27860"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x8001], "83cb9779212b26a6046e2a21ca50c78da0a6c309639257b7bc"}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x6, 0xe}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0x4, 0x3, 0x0, 0x1, 0x1, 0x6}, 0x2, {0x81, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "dfe60285a8e2aca7bfe10b8d5f90f44f3a86c0b228c5b2c6e75234173b6f9af482a5"}}}}}}}, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f00000014c0)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000400)=""/78, &(0x7f0000000500)=0x4e) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) io_setup(0x8, &(0x7f0000000600)) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x10, 0x1233, &(0x7f0000002a80)="$eJzs3E9rHGUcB/Dfron5U/NHrdX2oA94EQ9Dk4MnQYKkIFlQaiO0BWFqNrpk3C2ZJbAiVk9efR2evQm+g1x8Dd5y6TEHcaSz2TYb0xYxZot+PoedH/N7vvvMw/6BWWb24N0fvtzZLrPtvB/NRiOadyPSYYoUzRh5fWO4vXlrY63VWr+e0rW1GyvvpJQW3/jl9tczEXHhk58Wf56J/eVPD+6v/rZ/af/ywR83vuiUqVOmbq+f8nSn1+vnd4rFtNUpd7KUPiraedlOnW7Z3j3Wb6fttyNikPLu1sL83d12Waa8O0g77UHq91J/d5Dyz/NON2VZlhbmg8eafvqQzR8Pq6qKqKrpeD6qqqrmYj4uxAuxEIvxbUS8GC/Fy3ExXolL8Wq8FpfrUedx+AAAAAAAAAAAAAAAAAAAAPD/8aT7/5di2f3/AAAAAAAAAAAAAAAAAAAAcA4+vnlrY63VWr+e0mxE8f3e5t7mcDvsLz94KKIdV2Mpfo/67v+hYX3tg9b61VRbju+Ke0f5e3ubz9X5tVF+pf47gaP8VN0b5VeG+TSen4n5B/nt6NT51ViKi6fPv3pqfjbeevNYPoul+PWz6EURW/Xcj/LfrKT0/oetE/kr9TgAAAD4L8jSQ6eev2fZ4/rD/MPz66f/PnDi/HoqrkxNdu1ElIOvdvJm0d6ti2JUzP5lz5kUt49mHWvFvzPXORQR96u6mBlvNc96runRyzXxJR8rGmf1hI2jxT0j6zrbojG257CqqmfkwE4Wc+OfymIy30ecr0dvg0kfCQAAAAAAAAAAAH/HP714cC4injBmKk65suy9ySwVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgWAAAAABDmb51GxwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDBQAA//+3rrvI") unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) 6.042294983s ago: executing program 3 (id=2765): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830a}, 0x20, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x2c}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000380)={{0x0, 0x2}}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000400)={{0x0, 0x2, 0x213}}) fspick(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000004c0)={0x0, 0x0, {0x3, 0x0, 0x40000000}, 0x8}) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x30048b88) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="18020000000000000000000000002000180100002020702500000000002020207babf8ff00000000bda106000000000047010000f8ffffffb702000008000000b703000000000000850000005500000018010000646c6c250000000000202020db1af8ff41000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x200504, 0x0) close(r9) write(r8, &(0x7f0000000800)='7', 0x1) read(r7, 0x0, 0xfdef) inotify_init() pipe(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 6.010919156s ago: executing program 5 (id=2766): perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) syz_clone(0x82200011, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x0, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000001c0)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fa", 0x1b, 0x4008245, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, &(0x7f0000000a40)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000a80), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x20000811) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001640)={0x9, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000002680)='./sys\x00', 0x8d) mount(0x0, &(0x7f00000026c0)='./sys\x00', &(0x7f0000002700)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002740)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write$cgroup_pid(r1, &(0x7f0000002780)=0xffffffffffffffff, 0x12) 5.3857477s ago: executing program 3 (id=2769): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c3, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x40801, 0x0) r3 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x20000008}) ioctl$TCSBRKP(r2, 0x5425, 0x3) syz_emit_ethernet(0x31, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a0000000000005efa7116360100000100001267000000000000000000000000112233"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000580)=ANY=[], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x15}, 0x8, 0x8, 0x43a1bd76, 0x8, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000200000000000000070000000c001600fbffffffffffffff140008"], 0x34}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000900)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket(0x1e, 0x4, 0x0) 5.330804036s ago: executing program 5 (id=2770): perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000740), 0x1, 0x289, &(0x7f0000000780)="$eJzs3T1oc1UcB+D/vUn6GbQqiCh+gIhoodTBSQRdFAoiRURQoSLiJK1QLW6Nk4uDziqdXIq4WR3FpbgIXat2qAgiFgeLgw6Rm5tI3jRpQ9rc9E2eB9Kbc+8595yU/k4OpTkNYGItRMRTEVGKiMWIqERE0l7hgfyx0CzuzO6vRdTrL/yZNOrl5Vyr3XxE1CLSiCi3rm3tvXL89+GzD3/4buWhz/deni3gpZU6T5wcHz13+tnzH3y18thW2jxXbR7bX8cVuvvWLifLScTtQ+jsukjKox4B/Vh978sfs5DcEREPNvJfibQZ2Y82p76rxKOf9mr78R8H9xQ5VuDq1euV7D2wVgcmTtpYAyfpUuQL9mqk6dJSvob/qTSXvrWx+c7imxul9TfaZ40ilu/AsFQjjp75Zvrr+Y78/1bK8w+Mryz/L67u/pw9Pz3zmzJgLN2bH7L8L762/UjIP0wc+YfxMDdAG/mHsVAdsJH8w81uwOwOkP87fz14crDOgGulz/z/XuSYgGJY/8MYq7Se1Lpeln8YU9MXV+k7//7UF8ZOM/+Pp6MeCFC49vd/AGCy1KdH/QlkYFRGPf8AAAAAAAAAAAAAAAAAAABn7czur7UeEUkhfX7/ScTJ0xFR7uw/Gv/YIN+bbKbxde6vJKv2vyRv1jQ1UP+v3n+Z0V/eF8P/9HW5ozzTXrjll6H3f64f7hvOfd+/sdhzB8vt9YhaVnm5XD7785fEOXvj9bVj7m0XXK+83s9drk5nqp94qYhee38X/90tov/eVg4jvs3mn+Vu808adzWO3eefavsWywN6+59L3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDC/BcAAP//yRpr4Q==") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)=""/187, 0x1a, 0xbb, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xa, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffff47000000000000009500000000000000"], &(0x7f0000000bc0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000e80), 0x10}, 0x94) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000ac0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000b00), 0x3) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x2, 0xffffffffffffffff, 0x80000}, &(0x7f0000000380)=0xc) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) syz_read_part_table(0x5bd, &(0x7f0000000ec0)="$eJzs2z9o02kYB/AnahAUzsXJ4bAOTi6KoxmsJFFRCNEu4qCgiJgpghAhINihzdDSDKVjl1LI0j9T0wwdjpYWOpfSoUehQ6ejXQpdmuOu7+3t9Q8Inw/8ePK+7zd58gy/8Q1+aZfir263m4mI7tWTf7uvlS88u116XH4dkYm3EdHzx28z/5xkUuK/X72T1ptpPTF+rTO49zTb2ni1f/fdYuNSOv+RnuuT7b5TD8e5m8ot3fjZXy0O1XKf14v17YG11ZfTu/ly+0WjOfM8++RDyi2neiXVr1GL7/El3kclKvExqmfUf6y1df/wVrE19+nRQaEzvPAg5UqnnPO4/b/1jLxp1nvvzd4cfVibXynvXD7KVf7H2wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMWbyi3d+NlfLQ7Vcp/Xi/XtgbXVl9O7+XL7RaM58zz75EPKLad6JdWvUYvv8SXeRyUq8TGqZ9R/rLV1//BWsTX36dFBoTO88CDlSqec87j9v/WMvGnWe+/N3hx9WJtfKe9cPspVrp7THwAAAAAAAAAAAAAAAAAAAICIyBee3S49Lr+OyMTbiGj/3vvvVf9uuu+eSbk76cNm2p8Yv9YZ3HuabW282r/7brHxZ9r/kZ7rk+2+i5+Gk/o7AAD//5Yblcc=") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x10, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 5.183213771s ago: executing program 4 (id=2771): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4118, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x7, 0x6, 0x7, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet(0xa, 0x801, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) accept4(r1, 0x0, 0x0, 0x180800) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{0x0}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xf, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r0], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, r4, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'syz_tun\x00', 0x0}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={r5, r7}, 0x14) socket$kcm(0x2, 0x922000000001, 0x106) socket$nl_route(0x10, 0x3, 0x0) unshare(0x26020400) r9 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsmount(r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r10 = fsmount(r9, 0x1, 0x84) r11 = openat$cgroup_ro(r10, &(0x7f00000000c0)='cpu.stat\x00', 0x5000000, 0x0) pread64(r11, &(0x7f0000000200)=""/226, 0xe2, 0x88) syz_emit_ethernet(0x36, &(0x7f00000007c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r8, @ANYRES32=0x41424344, @ANYBLOB="5080000090780000"], 0x0) 4.99312104s ago: executing program 4 (id=2772): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) write$ppp(r2, &(0x7f0000000980)="f142", 0x2) 4.965503163s ago: executing program 3 (id=2773): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstatfs(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup, 0xffffffffffffffff, 0xf}, 0x20) write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000340)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000380)) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x13, 0x9c58d, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xa}, 0x1410d, 0x6, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$printer(0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000500)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x98}}, 0x0, 0x8, 0xc3, &(0x7f0000000540)=""/195}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000640)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000680)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000000780), 0x800001d, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x5, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket(0x10, 0x80002, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() getpid() 4.89376991s ago: executing program 4 (id=2774): prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x6) perf_event_open(&(0x7f0000000c00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000d40)={{0x2, 0xfffd, @loopback}, {0x1, @random="b3a2a73bf317"}, 0x4a, {0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x15}}, 'veth1_to_bridge\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x4000ffe, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010036bd7000f8dbdf25050000002c00"], 0x40}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 4.817292278s ago: executing program 4 (id=2775): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c3, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x40801, 0x0) r3 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x20000008}) ioctl$TCSBRKP(r2, 0x5425, 0x3) syz_emit_ethernet(0x31, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a0000000000005efa7116360100000100001267000000000000000000000000112233"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000580)=ANY=[], 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x15}, 0x8, 0x8, 0x43a1bd76, 0x8, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bind$inet6(r4, &(0x7f00000006c0)={0xa, 0xe22, 0x3, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000200000000000000070000000c001600fbffffffffffffff140008"], 0x34}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000900)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket(0x1e, 0x4, 0x0) 4.681543182s ago: executing program 2 (id=2776): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c3, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x40801, 0x0) r2 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x20000008}) ioctl$TCSBRKP(r1, 0x5425, 0x3) syz_emit_ethernet(0x46, &(0x7f0000000580)=ANY=[], 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000200000000000000070000000c001600fbffffffffffffff140008"], 0x34}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000900)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r7 = socket(0x1e, 0x4, 0x0) connect$tipc(r7, &(0x7f0000000700)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) write(0xffffffffffffffff, &(0x7f0000000780)=';', 0x1) 4.595681851s ago: executing program 5 (id=2777): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c3, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x40801, 0x0) r2 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x20000008}) ioctl$TCSBRKP(r1, 0x5425, 0x3) syz_emit_ethernet(0x46, &(0x7f0000000580)=ANY=[], 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000200000000000000070000000c001600fbffffffffffffff140008"], 0x34}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000900)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r7 = socket(0x1e, 0x4, 0x0) connect$tipc(r7, &(0x7f0000000700)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) write(0xffffffffffffffff, &(0x7f0000000780)=';', 0x1) 4.539109906s ago: executing program 0 (id=2778): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007000000095"], &(0x7f0000000500)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.492034771s ago: executing program 0 (id=2779): unshare(0x6020400) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) r2 = openat$cgroup_int(r1, &(0x7f0000000240)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000280)=0x5, 0x12) 4.491637602s ago: executing program 0 (id=2780): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac47037fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5ed838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b60b23cc613b68fcfdb27d4015a8e7fea999a9686fb7e607a98e8f21e41cd1ac96628e66378f4cea241309cd125d29cdcc73f1e02cbb7a655ca34d00dff11b617550d2873b08f16eec3b3ae4806d6e5472bd7600facaf04bae6bef384568a96fa0d4d31dfecc9c0559656dfbdab64b60f2e2e2dd3d9f2d130fa676e70e18543946dd8ed05ba41f74f01be37b4f55e6876ea284800e0e0c7f0f2accb46d4908f21236942bac3389a344ee5ef8516c9586921e9f883c4d5d6982f44af11a0442f68decf2774e15f3e341ce5d43921024af112232d6fbf20cec198c5f9b3d11c7ec6670aec4", 0x222}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="32d33a47d96ceacc565129f837dfc4ec8df24612082800303fbc4c7dae05b96c2dc595b8a5423e", 0x27}, {&(0x7f0000000600)="20b946e4ffc923", 0x7}, {&(0x7f0000000640)="e705ba567be6127d85d39375b10960531cc5504726702fa92b283ee716613616ab01f6e820db6e5cfcb4d90015ea23d7800aec98", 0x34}], 0x3}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)='?', 0x1}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="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", 0x278}], 0x1) 4.491075351s ago: executing program 0 (id=2781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) keyctl$invalidate(0x15, 0x0) socket(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300), 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r3, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r3, 0x0, 0x0) sendto(r3, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) 3.996850312s ago: executing program 3 (id=2782): socket$igmp(0x2, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4118, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x7, 0x6, 0x7, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet(0xa, 0x801, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) accept4(r1, 0x0, 0x0, 0x180800) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xf, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r0], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, r4, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'syz_tun\x00', 0x0}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={r5, r7}, 0x14) socket$kcm(0x2, 0x922000000001, 0x106) socket$nl_route(0x10, 0x3, 0x0) unshare(0x26020400) r9 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsmount(r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r10 = fsmount(r9, 0x1, 0x84) r11 = openat$cgroup_ro(r10, &(0x7f00000000c0)='cpu.stat\x00', 0x5000000, 0x0) pread64(r11, &(0x7f0000000200)=""/226, 0xe2, 0x88) syz_emit_ethernet(0x36, &(0x7f00000007c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r8, @ANYRES32=0x41424344, @ANYBLOB="5080000090780000"], 0x0) 3.9214069s ago: executing program 3 (id=2783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xed3}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000002800048024000180090001006d6574028008000140000000010800024000000002140000001100010000000000000000000000000a26c653a30efffdcd087ec00ca4578e4495"], 0x7c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000110900010073797a31000000002400048020000180070001006374000014000280080002400000000308000440000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socket$inet6(0xa, 0x3, 0x3) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x2c, @dev={0xac, 0x14, 0x14, 0x35}, 0x4e62, 0x1, 'sed\x00', 0x3eac60c95784fb2b, 0x2, 0x7}, 0xffffffffffffff38) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x804000, &(0x7f0000000000), 0x2, 0xbc6, &(0x7f00000027c0)="$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") creat(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1f0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x405, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9, '\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\t'}}}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f00000003c0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0x8, 0x4}, {0x3, 0x4}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 3.835129268s ago: executing program 2 (id=2784): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) write$ppp(r2, &(0x7f0000000980)="f142", 0x2) 3.812247201s ago: executing program 2 (id=2785): prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x6) perf_event_open(&(0x7f0000000c00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000d40)={{0x2, 0xfffd, @loopback}, {0x1, @random="b3a2a73bf317"}, 0x4a, {0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x15}}, 'veth1_to_bridge\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x4000ffe, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010036bd7000f8dbdf25050000002c00"], 0x40}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 3.809611911s ago: executing program 4 (id=2786): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xed3}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000002800048024000180090001006d6574028008000140000000010800024000000002140000001100010000000000000000000000000a26c653a30efffdcd087ec00ca4578e4495"], 0x7c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000110900010073797a31000000002400048020000180070001006374000014000280080002400000000308000440000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socket$inet6(0xa, 0x3, 0x3) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e5b, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x804000, &(0x7f0000000000), 0x2, 0xbc6, &(0x7f00000027c0)="$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") r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x405, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9, '\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\t'}}}]}, 0x48}}, 0x0) 3.771592625s ago: executing program 2 (id=2787): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000200025a726bd7000bb19d6250a001404ff0000010200010014000200ff02000000000000000000020000000108000600000000001400110076"], 0x4c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xd, 0x2000000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() r3 = syz_open_procfs(0x0, &(0x7f0000000280)='map_files\x00') getdents(r3, 0x0, 0x48) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8032, 0xffffffffffffffff, 0x9a5ec000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000400), 0x4000087, 0x2, 0x0) add_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x2c, &(0x7f0000000400), 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x1ba1433b002043e0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x2, 0x16, &(0x7f0000000840)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf3000000000000015000200000000103d200100000000009500000000000000bc26080000000000bf67000000000000070300000fff070067020000030000001606000080ffffffbf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000940)='GPL\x00'}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) 3.72632549s ago: executing program 5 (id=2788): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000200025a726bd7000bb19d6250a001404ff0000010200010014000200ff02000000000000000000020000000108000600000000001400110076"], 0x4c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xd, 0x2000000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() r3 = syz_open_procfs(0x0, &(0x7f0000000280)='map_files\x00') getdents(r3, 0x0, 0x48) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8032, 0xffffffffffffffff, 0x9a5ec000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000400), 0x4000087, 0x2, 0x0) add_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x2c, &(0x7f0000000400), 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x1ba1433b002043e0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x2, 0x16, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000940)='GPL\x00'}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) 703.118768ms ago: executing program 4 (id=2789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xed3}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000002800048024000180090001006d6574028008000140000000010800024000000002140000001100010000000000000000000000000a26c653a30efffdcd087ec00ca4578e4495"], 0x7c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000110900010073797a31000000002400048020000180070001006374000014000280080002400000000308000440000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socket$inet6(0xa, 0x3, 0x3) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e5b, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x804000, &(0x7f0000000000), 0x2, 0xbc6, &(0x7f00000027c0)="$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") creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1f0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x405, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9, '\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\t'}}}]}, 0x48}}, 0x0) 700.931429ms ago: executing program 3 (id=2790): perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) syz_clone(0x82200011, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x0, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000001c0)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fa", 0x1b, 0x4008245, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000200)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r1 = socket$kcm(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5452, &(0x7f0000000a40)) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000a80), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x20000811) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001640)={0x9, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000002680)='./sys\x00', 0x8d) mount(0x0, &(0x7f00000026c0)='./sys\x00', &(0x7f0000002700)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000002740)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write$cgroup_pid(r2, &(0x7f0000002780)=0xffffffffffffffff, 0x12) 189.040471ms ago: executing program 0 (id=2791): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007000000095"], &(0x7f0000000500)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x7, 0x0, &(0x7f00000005c0)="e0b9547ed387db", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 187.756001ms ago: executing program 5 (id=2792): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000640), &(0x7f0000000680)=r1}, 0x20) bind(0xffffffffffffffff, &(0x7f0000000a80)=@can={0x1d, 0x0, 0x1, 0x2}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r2, &(0x7f0000000b00)={&(0x7f0000000b40), 0x10, &(0x7f0000000b80)={&(0x7f0000000bc0)=@can={{0x1}, 0x8, 0x0, 0x0, 0x0, "0100"}, 0x10}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c00)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001140)={&(0x7f0000000f40)={0x1f8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x120, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_VALUE={0x18, 0x4, "2c1ceef9021de55835f29598df851afa7d50db5d"}, @ETHTOOL_A_BITSET_VALUE={0xf4, 0x4, "7728c9ee13fc6ef43dd0517fa1fef957adbe326854173d3c62ceaecbaddaca637e53443d6f2aa878863fe78ff770e067421c8397b92f7387c413a5a2c5aadabccda4a329f13b70a6254292faf62c166f0b41ffe5a0dc2c305358950bd000599780fa99711716cb1d575f40ae1875ee8df90db33030c7a7479eb1b01cb652e919d919ec285986164abe9ad16deda5fb89720dc65c4aafdefe29cfe4e8acde0a490172fa92b4072c30722b867a72c31711c9f0cff7bffb3f3789cc9b861341aba66b7f2551f89d7c6fe7ff33acd996f48234dbb294f9e7b4793d083011492ea13b1377ffbb309fe26f04afb0ad472f1069"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r7 = epoll_create1(0x80000) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000200)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r8 = syz_open_pts(r6, 0x0) r9 = dup3(r8, r6, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000240)={0x80000001}) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000280)={0x4, 0x4, 0x6, 0x5, 0x1b, "3e53300da5b1523053a727c900"}) 186.979761ms ago: executing program 2 (id=2793): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) r1 = socket$pppoe(0x18, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) write$ppp(r2, &(0x7f0000000980)="f142", 0x2) 103.992579ms ago: executing program 0 (id=2794): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x40040) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = epoll_create1(0x80000) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000240)={0x80000001}) 0s ago: executing program 2 (id=2795): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) write$ppp(r2, &(0x7f0000000980)="f142", 0x2) kernel console output (not intermixed with test programs): 37.665802][T11080] __x64_sys_recvmsg+0xd1/0x160 [ 337.665827][T11080] x64_sys_call+0xcad/0x2550 [ 337.665892][T11080] do_syscall_64+0x112/0x360 [ 337.665932][T11080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.665958][T11080] RIP: 0033:0x7f5316e8fb19 [ 337.666051][T11080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.666083][T11080] RSP: 002b:00007f53158df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 337.666107][T11080] RAX: ffffffffffffffda RBX: 00007f5317115fa0 RCX: 00007f5316e8fb19 [ 337.666131][T11080] RDX: 0000000040000100 RSI: 0000200000001140 RDI: 0000000000000004 [ 337.666147][T11080] RBP: 00007f53158df090 R08: 0000000000000000 R09: 0000000000000000 [ 337.666163][T11080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.666223][T11080] R13: 00007f5317116038 R14: 00007f5317115fa0 R15: 00007ffe81687e88 [ 337.666245][T11080] [ 337.747716][T11084] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.2170' sets config #-1 [ 337.991043][T11037] loop0: detected capacity change from 0 to 8192 [ 337.996650][T11037] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 338.063235][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 338.063250][ T29] audit: type=1400 audit(1793740631.452:1230): avc: denied { write } for pid=11072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.088453][ T29] audit: type=1400 audit(1793740631.472:1231): avc: denied { write } for pid=11091 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.260028][ T29] audit: type=1400 audit(1793740631.642:1232): avc: denied { write } for pid=11093 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.329435][ T29] audit: type=1400 audit(1793740631.712:1233): avc: denied { write } for pid=11109 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.367915][T11103] FAULT_INJECTION: forcing a failure. [ 338.367915][T11103] name failslab, interval 1, probability 0, space 0, times 0 [ 338.368059][T11103] CPU: 0 UID: 0 PID: 11103 Comm: syz.0.2175 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 338.368093][T11103] Tainted: [W]=WARN [ 338.368179][T11103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 338.368194][T11103] Call Trace: [ 338.368201][T11103] [ 338.368211][T11103] __dump_stack+0x1d/0x30 [ 338.368241][T11103] dump_stack_lvl+0x95/0xd0 [ 338.368268][T11103] dump_stack+0x15/0x1b [ 338.368354][T11103] should_fail_ex+0x259/0x270 [ 338.368388][T11103] ? security_file_alloc+0x32/0xf0 [ 338.368423][T11103] should_failslab+0x8c/0xb0 [ 338.368468][T11103] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 338.368502][T11103] ? security_file_alloc+0x32/0xf0 [ 338.368588][T11103] security_file_alloc+0x32/0xf0 [ 338.368623][T11103] init_file+0x5b/0x1b0 [ 338.368711][T11103] alloc_empty_file+0x85/0x1e0 [ 338.368739][T11103] alloc_file_pseudo+0x92/0x120 [ 338.368770][T11103] anon_inode_getfd+0xc1/0x190 [ 338.368798][T11103] do_inotify_init+0x21d/0x280 [ 338.368910][T11103] __ia32_sys_inotify_init+0x10/0x20 [ 338.368945][T11103] x64_sys_call+0x1ef9/0x2550 [ 338.369035][T11103] do_syscall_64+0x112/0x360 [ 338.369073][T11103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.369098][T11103] RIP: 0033:0x7fe24f7ffb19 [ 338.369117][T11103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.369209][T11103] RSP: 002b:00007fe24e257028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 338.369233][T11103] RAX: ffffffffffffffda RBX: 00007fe24fa85fa0 RCX: 00007fe24f7ffb19 [ 338.369250][T11103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 338.369264][T11103] RBP: 00007fe24fa85fa0 R08: 0000000000000000 R09: 0000000000000000 [ 338.369279][T11103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.369294][T11103] R13: 00007fe24fa86038 R14: 00007fe24fa85fa0 R15: 00007fff66f613a8 [ 338.369342][T11103] [ 338.478847][T11115] can0: slcan on ttyS3. [ 338.542639][T11115] can0 (unregistered): slcan off ttyS3. [ 338.678968][T11132] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.2177' sets config #-1 [ 338.681388][T11130] loop4: detected capacity change from 0 to 8192 [ 338.761648][ T29] audit: type=1400 audit(1793740632.142:1234): avc: denied { write } for pid=11119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.814004][ T29] audit: type=1400 audit(1793740632.202:1235): avc: denied { write } for pid=11141 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.333458][ T29] audit: type=1400 audit(1793740632.702:1236): avc: denied { write } for pid=11146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.408777][T11143] can0: slcan on ttyS3. [ 339.464935][T11159] loop2: detected capacity change from 0 to 128 [ 339.553904][ T29] audit: type=1400 audit(1793740632.902:1237): avc: denied { write } for pid=11162 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.592067][T11159] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 339.622357][T11159] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 339.637778][T11159] ext2 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.737329][T11167] loop4: detected capacity change from 0 to 512 [ 339.821295][T11167] loop4: detected capacity change from 0 to 1024 [ 340.089027][T11142] can0 (unregistered): slcan off ttyS3. [ 340.635702][ T29] audit: type=1400 audit(1793740634.022:1238): avc: denied { write } for pid=11171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.772462][ T29] audit: type=1400 audit(1793740634.152:1239): avc: denied { write } for pid=11192 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.623368][ T3299] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 341.667733][T11215] loop4: detected capacity change from 0 to 512 [ 341.668859][T11215] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 341.668872][T11215] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 341.710784][T11215] EXT4-fs (loop4): 1 truncate cleaned up [ 341.711131][T11215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.749374][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.795533][T11227] loop4: detected capacity change from 0 to 512 [ 341.795833][T11227] EXT4-fs: Ignoring removed orlov option [ 341.903654][T11227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.903802][T11227] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.977033][T11223] loop0: detected capacity change from 0 to 8192 [ 342.626108][T11238] tunl0: Caught tx_queue_len zero misconfig [ 342.853304][T11239] netlink: 596 bytes leftover after parsing attributes in process `syz.5.2198'. [ 343.542504][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 343.542529][ T29] audit: type=1400 audit(1793740636.922:1243): avc: denied { setopt } for pid=11270 comm="syz.2.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 343.806865][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.841341][T11283] loop5: detected capacity change from 0 to 512 [ 343.843658][T11283] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 344.821259][T11283] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #17: comm syz.5.2211: inode has both inline data and extents flags [ 344.821292][T11283] loop5: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 344.821542][T11283] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2211: couldn't read orphan inode 17 (err -117) [ 344.821583][T11283] loop5: lost filesystem error report for type 5 error -117 [ 344.822164][T11283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.829421][T11283] netlink: 'syz.5.2211': attribute type 8 has an invalid length. [ 344.837659][T11283] FAULT_INJECTION: forcing a failure. [ 344.837659][T11283] name failslab, interval 1, probability 0, space 0, times 0 [ 344.837692][T11283] CPU: 1 UID: 0 PID: 11283 Comm: syz.5.2211 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 344.837806][T11283] Tainted: [W]=WARN [ 344.837817][T11283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 344.837831][T11283] Call Trace: [ 344.837839][T11283] [ 344.837848][T11283] __dump_stack+0x1d/0x30 [ 344.837941][T11283] dump_stack_lvl+0x95/0xd0 [ 344.838038][T11283] dump_stack+0x15/0x1b [ 344.838062][T11283] should_fail_ex+0x259/0x270 [ 344.838102][T11283] ? alloc_workqueue_va+0x54d/0x15d0 [ 344.838138][T11283] should_failslab+0x8c/0xb0 [ 344.838174][T11283] __kmalloc_cache_node_noprof+0x5f/0x3f0 [ 344.838301][T11283] ? alloc_workqueue_va+0x54d/0x15d0 [ 344.838385][T11283] alloc_workqueue_va+0x54d/0x15d0 [ 344.838505][T11283] alloc_workqueue_noprof+0x84/0xb0 [ 344.838543][T11283] nci_register_device+0x20c/0x510 [ 344.838637][T11283] virtual_ncidev_open+0xca/0x130 [ 344.838743][T11283] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 344.838782][T11283] misc_open+0x1df/0x220 [ 344.838818][T11283] chrdev_open+0x2eb/0x3a0 [ 344.838914][T11283] do_dentry_open+0x496/0xa40 [ 344.838941][T11283] ? __pfx_chrdev_open+0x10/0x10 [ 344.838966][T11283] vfs_open_consume+0x46/0x1f0 [ 344.838994][T11283] path_openat+0xc16/0x11c0 [ 344.839089][T11283] do_file_open+0x16c/0x290 [ 344.839135][T11283] do_sys_openat2+0xa1/0x140 [ 344.839166][T11283] __x64_sys_openat+0xf2/0x120 [ 344.839245][T11283] x64_sys_call+0x1f72/0x2550 [ 344.839271][T11283] do_syscall_64+0x112/0x360 [ 344.839304][T11283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.839326][T11283] RIP: 0033:0x7f5316e8fb19 [ 344.839417][T11283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.839517][T11283] RSP: 002b:00007f53158df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 344.839571][T11283] RAX: ffffffffffffffda RBX: 00007f5317115fa0 RCX: 00007f5316e8fb19 [ 344.839588][T11283] RDX: 0000000000000002 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 344.839605][T11283] RBP: 00007f5316f27b70 R08: 0000000000000000 R09: 0000000000000000 [ 344.839620][T11283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.839635][T11283] R13: 00007f5317116038 R14: 00007f5317115fa0 R15: 00007ffe81687e88 [ 344.839657][T11283] [ 345.396903][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 345.434999][T11294] loop4: detected capacity change from 0 to 512 [ 345.453361][T11294] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.2213: inode has both inline data and extents flags [ 345.453389][T11294] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 345.453481][T11294] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2213: couldn't read orphan inode 15 (err -117) [ 345.453504][T11294] loop4: lost filesystem error report for type 5 error -117 [ 345.454006][T11294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.486495][ T29] audit: type=1400 audit(1793740638.842:1244): avc: denied { write } for pid=11293 comm="syz.4.2213" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.643404][T11297] loop2: detected capacity change from 0 to 128 [ 345.681723][T11297] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 345.745530][T11297] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 345.748637][T11297] ext2 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.801866][ T8759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.967544][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.998616][T11310] loop4: detected capacity change from 0 to 512 [ 346.000723][T11310] EXT4-fs: Ignoring removed orlov option [ 346.031823][T11310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.031891][T11310] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.107501][T11307] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2217'. [ 346.154808][ T29] audit: type=1400 audit(1793740639.542:1245): avc: denied { write } for pid=11309 comm="syz.4.2218" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 346.251107][ T3299] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 347.027594][T11324] ./dev/sda1: Can't lookup blockdev [ 347.090271][ T29] audit: type=1400 audit(1793740640.472:1246): avc: denied { bind } for pid=11331 comm="syz.0.2224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 347.345810][T11361] TC_ACT_REPEAT abuse ? [ 347.392275][T11366] device-mapper: table: 252:0: flakey: unknown target type [ 347.392325][T11366] device-mapper: ioctl: error adding target to table [ 347.399868][ T29] audit: type=1400 audit(1793740640.782:1247): avc: denied { read } for pid=11363 comm="syz.5.2239" name="dm0" dev="tmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 347.459566][ T29] audit: type=1400 audit(1793740640.842:1248): avc: denied { write } for pid=11375 comm="syz.0.2243" path="socket:[28477]" dev="sockfs" ino=28477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 347.494743][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.521652][T11383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2246'. [ 347.533597][T11383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11383 comm=syz.4.2246 [ 347.599290][ T29] audit: type=1400 audit(1793740640.982:1249): avc: denied { mount } for pid=11397 comm="syz.4.2252" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 347.715464][ T29] audit: type=1400 audit(1793740641.102:1250): avc: denied { getopt } for pid=11402 comm="syz.3.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 347.857417][ T29] audit: type=1400 audit(1793740641.242:1251): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 347.884321][ T29] audit: type=1400 audit(1793740641.272:1252): avc: denied { write } for pid=11411 comm="syz.0.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 347.903303][T11416] loop5: detected capacity change from 0 to 512 [ 347.921492][T11416] EXT4-fs: Ignoring removed orlov option [ 347.934213][T11414] loop4: detected capacity change from 0 to 8192 [ 347.942263][T11416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.942382][T11416] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.183296][ T8759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.239471][T11439] loop0: detected capacity change from 0 to 512 [ 349.250211][T11439] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 349.265731][T11439] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #17: comm syz.0.2264: inode has both inline data and extents flags [ 349.265955][T11439] loop0: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 349.266192][T11439] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2264: couldn't read orphan inode 17 (err -117) [ 349.266223][T11439] loop0: lost filesystem error report for type 5 error -117 [ 349.266698][T11439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.267512][T11439] netlink: 'syz.0.2264': attribute type 8 has an invalid length. [ 349.274115][T11439] FAULT_INJECTION: forcing a failure. [ 349.274115][T11439] name failslab, interval 1, probability 0, space 0, times 0 [ 349.274149][T11439] CPU: 1 UID: 0 PID: 11439 Comm: syz.0.2264 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 349.274229][T11439] Tainted: [W]=WARN [ 349.274240][T11439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 349.274255][T11439] Call Trace: [ 349.274261][T11439] [ 349.274269][T11439] __dump_stack+0x1d/0x30 [ 349.274298][T11439] dump_stack_lvl+0x95/0xd0 [ 349.274331][T11439] dump_stack+0x15/0x1b [ 349.274373][T11439] should_fail_ex+0x259/0x270 [ 349.274406][T11439] ? __alloc_skb+0x2e0/0x6f0 [ 349.274440][T11439] should_failslab+0x8c/0xb0 [ 349.274528][T11439] kmem_cache_alloc_node_noprof+0x60/0x3e0 [ 349.274563][T11439] ? netlink_insert+0x7d5/0x950 [ 349.274601][T11439] ? __alloc_skb+0x2e0/0x6f0 [ 349.274638][T11439] __alloc_skb+0x2e0/0x6f0 [ 349.274671][T11439] ? __alloc_skb+0x209/0x6f0 [ 349.274750][T11439] netlink_alloc_large_skb+0xbf/0xf0 [ 349.274786][T11439] netlink_sendmsg+0x434/0x740 [ 349.274812][T11439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.274909][T11439] __sys_sendto+0x429/0x480 [ 349.275033][T11439] __x64_sys_sendto+0x76/0x90 [ 349.275091][T11439] x64_sys_call+0x200c/0x2550 [ 349.275120][T11439] do_syscall_64+0x112/0x360 [ 349.275193][T11439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.275287][T11439] RIP: 0033:0x7fe24f7c034e [ 349.275312][T11439] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 349.275333][T11439] RSP: 002b:00007fe24e255e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 349.275356][T11439] RAX: ffffffffffffffda RBX: 00007fe24e2576c0 RCX: 00007fe24f7c034e [ 349.275373][T11439] RDX: 000000000000001c RSI: 00007fe24e256000 RDI: 0000000000000007 [ 349.275423][T11439] RBP: 0000000000000000 R08: 00007fe24e255f04 R09: 000000000000000c [ 349.275438][T11439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 349.275453][T11439] R13: 00007fe24e255f58 R14: 00007fe24e256000 R15: 0000000000000000 [ 349.275475][T11439] [ 349.313552][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.315636][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2265'. [ 349.318714][ T28] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 349.319082][T11446] FAULT_INJECTION: forcing a failure. [ 349.319082][T11446] name failslab, interval 1, probability 0, space 0, times 0 [ 349.319112][T11446] CPU: 1 UID: 0 PID: 11446 Comm: syz.5.2262 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 349.319146][T11446] Tainted: [W]=WARN [ 349.319211][T11446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 349.319225][T11446] Call Trace: [ 349.319233][T11446] [ 349.319294][T11446] __dump_stack+0x1d/0x30 [ 349.319331][T11446] dump_stack_lvl+0x95/0xd0 [ 349.319357][T11446] dump_stack+0x15/0x1b [ 349.319380][T11446] should_fail_ex+0x259/0x270 [ 349.319413][T11446] ? security_file_alloc+0x32/0xf0 [ 349.319489][T11446] should_failslab+0x8c/0xb0 [ 349.319556][T11446] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 349.319590][T11446] ? security_file_alloc+0x32/0xf0 [ 349.319628][T11446] security_file_alloc+0x32/0xf0 [ 349.319699][T11446] init_file+0x5b/0x1b0 [ 349.319777][T11446] alloc_empty_file+0x85/0x1e0 [ 349.319830][T11446] alloc_file_pseudo+0x92/0x120 [ 349.319859][T11446] anon_inode_getfd+0xc1/0x190 [ 349.319903][T11446] do_inotify_init+0x21d/0x280 [ 349.319940][T11446] __ia32_sys_inotify_init+0x10/0x20 [ 349.320055][T11446] x64_sys_call+0x1ef9/0x2550 [ 349.320141][T11446] do_syscall_64+0x112/0x360 [ 349.320227][T11446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.320258][T11446] RIP: 0033:0x7f5316e8fb19 [ 349.320276][T11446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.320296][T11446] RSP: 002b:00007f53158be028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 349.320321][T11446] RAX: ffffffffffffffda RBX: 00007f5317116090 RCX: 00007f5316e8fb19 [ 349.320334][T11446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 349.320389][T11446] RBP: 00007f5317116090 R08: 0000000000000000 R09: 0000000000000000 [ 349.320404][T11446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.320419][T11446] R13: 00007f5317116128 R14: 00007f5317116090 R15: 00007ffe81687e88 [ 349.320442][T11446] [ 349.320584][T11443] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 350.123109][T11454] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2267'. [ 350.231017][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 350.231034][ T29] audit: type=1400 audit(1793740643.612:1255): avc: denied { create } for pid=11462 comm="syz.0.2270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 350.242978][T11463] FAULT_INJECTION: forcing a failure. [ 350.242978][T11463] name failslab, interval 1, probability 0, space 0, times 0 [ 350.243013][T11463] CPU: 1 UID: 0 PID: 11463 Comm: syz.0.2270 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 350.243115][T11463] Tainted: [W]=WARN [ 350.243124][T11463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 350.243138][T11463] Call Trace: [ 350.243146][T11463] [ 350.243155][T11463] __dump_stack+0x1d/0x30 [ 350.243184][T11463] dump_stack_lvl+0x95/0xd0 [ 350.243273][T11463] dump_stack+0x15/0x1b [ 350.243296][T11463] should_fail_ex+0x259/0x270 [ 350.243410][T11463] ? __alloc_skb+0x2e0/0x6f0 [ 350.243444][T11463] should_failslab+0x8c/0xb0 [ 350.243480][T11463] kmem_cache_alloc_node_noprof+0x60/0x3e0 [ 350.243575][T11463] ? __alloc_skb+0x2e0/0x6f0 [ 350.243611][T11463] __alloc_skb+0x2e0/0x6f0 [ 350.243644][T11463] ? __alloc_skb+0x209/0x6f0 [ 350.243765][T11463] inet_netconf_notify_devconf+0x173/0x230 [ 350.243845][T11463] devinet_sysctl_forward+0x325/0x3d0 [ 350.243933][T11463] proc_sys_call_handler+0x2ec/0x4a0 [ 350.244042][T11463] ? __pfx_proc_sys_write+0x10/0x10 [ 350.244071][T11463] proc_sys_write+0x22/0x30 [ 350.244171][T11463] vfs_write+0x57a/0x990 [ 350.244209][T11463] ksys_write+0xdc/0x1a0 [ 350.244246][T11463] __x64_sys_write+0x40/0x50 [ 350.244331][T11463] x64_sys_call+0x154e/0x2550 [ 350.244442][T11463] do_syscall_64+0x112/0x360 [ 350.244594][T11463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.244619][T11463] RIP: 0033:0x7fe24f7ffb19 [ 350.244726][T11463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.244747][T11463] RSP: 002b:00007fe24e257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 350.244770][T11463] RAX: ffffffffffffffda RBX: 00007fe24fa85fa0 RCX: 00007fe24f7ffb19 [ 350.244787][T11463] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000004 [ 350.244802][T11463] RBP: 00007fe24f897b70 R08: 0000000000000000 R09: 0000000000000000 [ 350.244856][T11463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.244953][T11463] R13: 00007fe24fa86038 R14: 00007fe24fa85fa0 R15: 00007fff66f613a8 [ 350.245007][T11463] [ 350.536459][T11387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 350.583990][T11476] ./dev/sda1: Can't lookup blockdev [ 350.588840][T11473] loop4: detected capacity change from 0 to 8192 [ 350.623932][T11479] loop5: detected capacity change from 0 to 512 [ 350.624317][T11479] EXT4-fs: Ignoring removed orlov option [ 350.725283][T11479] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.725413][T11479] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.740595][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2277'. [ 351.055034][ T29] audit: type=1400 audit(1793740644.432:1256): avc: denied { write } for pid=11478 comm="syz.5.2274" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.792087][T11505] loop4: detected capacity change from 0 to 4096 [ 351.854638][T11505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.877646][ T29] audit: type=1400 audit(1793740645.262:1257): avc: denied { write } for pid=11504 comm="syz.4.2281" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.907728][T11505] EXT4-fs error (device loop4): ext4_do_update_inode:6707: inode #15: comm syz.4.2281: corrupted inode contents [ 351.915133][ T29] audit: type=1400 audit(1793740645.302:1258): avc: denied { write } for pid=11504 comm="syz.4.2281" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.916074][ T29] audit: type=1400 audit(1793740645.302:1259): avc: denied { write } for pid=11504 comm="syz.4.2281" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.916113][ T29] audit: type=1400 audit(1793740645.302:1260): avc: denied { write } for pid=11504 comm="syz.4.2281" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.962896][T11505] EXT4-fs error (device loop4): ext4_dirty_inode:7679: inode #15: comm syz.4.2281: mark_inode_dirty error [ 351.963752][T11505] EXT4-fs error (device loop4): ext4_do_update_inode:6707: inode #15: comm syz.4.2281: corrupted inode contents [ 351.964293][T11505] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.2281: mark_inode_dirty error [ 351.965001][T11505] EXT4-fs error (device loop4): ext4_do_update_inode:6707: inode #15: comm syz.4.2281: corrupted inode contents [ 351.965657][T11505] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.2281: mark_inode_dirty error [ 351.966158][T11505] EXT4-fs error (device loop4): ext4_do_update_inode:6707: inode #15: comm syz.4.2281: corrupted inode contents [ 351.966694][T11505] EXT4-fs error (device loop4): ext4_truncate:5538: inode #15: comm syz.4.2281: mark_inode_dirty error [ 351.967391][T11505] EXT4-fs error (device loop4) in ext4_setattr:7187: Corrupt filesystem [ 351.969973][T11516] EXT4-fs error (device loop4): ext4_do_update_inode:6707: inode #15: comm syz.4.2281: corrupted inode contents [ 352.035890][ T3293] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 352.036265][ T3293] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 352.036384][ T3293] EXT4-fs warning (device loop4): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 352.048787][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.190886][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2289'. [ 352.194645][T11527] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 352.195431][ T1007] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 352.310947][ T8759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.546840][T11543] can0: slcan on ttyS3. [ 352.642665][T11543] can0 (unregistered): slcan off ttyS3. [ 352.665816][T11543] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.2293' sets config #-1 [ 352.685019][T11534] loop5: detected capacity change from 0 to 4096 [ 352.800985][T11534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.831971][ T29] audit: type=1400 audit(1793740646.212:1261): avc: denied { write } for pid=11533 comm="syz.5.2290" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 352.866916][T11534] EXT4-fs error (device loop5): ext4_do_update_inode:6707: inode #15: comm syz.5.2290: corrupted inode contents [ 352.867772][T11534] EXT4-fs error (device loop5): ext4_dirty_inode:7679: inode #15: comm syz.5.2290: mark_inode_dirty error [ 352.868802][T11534] EXT4-fs error (device loop5): ext4_do_update_inode:6707: inode #15: comm syz.5.2290: corrupted inode contents [ 352.869145][T11534] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.2290: mark_inode_dirty error [ 352.870176][T11534] EXT4-fs error (device loop5): ext4_do_update_inode:6707: inode #15: comm syz.5.2290: corrupted inode contents [ 352.870909][T11534] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.2290: mark_inode_dirty error [ 352.871681][T11534] EXT4-fs error (device loop5): ext4_do_update_inode:6707: inode #15: comm syz.5.2290: corrupted inode contents [ 352.872296][T11534] EXT4-fs error (device loop5): ext4_truncate:5538: inode #15: comm syz.5.2290: mark_inode_dirty error [ 352.875231][T11534] EXT4-fs error (device loop5) in ext4_setattr:7187: Corrupt filesystem [ 352.884472][ T29] audit: type=1400 audit(1793740646.262:1262): avc: denied { write } for pid=11533 comm="syz.5.2290" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 352.971281][T11549] EXT4-fs error (device loop5): ext4_do_update_inode:6707: inode #15: comm syz.5.2290: corrupted inode contents [ 352.975250][ T29] audit: type=1400 audit(1793740646.352:1263): avc: denied { write } for pid=11533 comm="syz.5.2290" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 352.975312][ T29] audit: type=1400 audit(1793740646.352:1264): avc: denied { write } for pid=11533 comm="syz.5.2290" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 353.200301][ T8759] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 353.200547][ T8759] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 353.200692][ T8759] EXT4-fs warning (device loop5): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 353.231293][ T8759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.268377][T11555] loop5: detected capacity change from 0 to 2048 [ 353.283225][T11555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.326831][T11557] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2296'. [ 353.425294][T11567] ./dev/sda1: Can't lookup blockdev [ 353.557597][T11565] FAULT_INJECTION: forcing a failure. [ 353.557597][T11565] name failslab, interval 1, probability 0, space 0, times 0 [ 353.557648][T11565] CPU: 0 UID: 0 PID: 11565 Comm: syz.2.2298 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 353.557685][T11565] Tainted: [W]=WARN [ 353.557751][T11565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 353.557767][T11565] Call Trace: [ 353.557774][T11565] [ 353.557784][T11565] __dump_stack+0x1d/0x30 [ 353.557956][T11565] dump_stack_lvl+0x95/0xd0 [ 353.557985][T11565] dump_stack+0x15/0x1b [ 353.558035][T11565] should_fail_ex+0x259/0x270 [ 353.558069][T11565] ? security_file_alloc+0x32/0xf0 [ 353.558103][T11565] should_failslab+0x8c/0xb0 [ 353.558197][T11565] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 353.558235][T11565] ? security_file_alloc+0x32/0xf0 [ 353.558289][T11565] security_file_alloc+0x32/0xf0 [ 353.558389][T11565] init_file+0x5b/0x1b0 [ 353.558535][T11565] alloc_empty_file+0x85/0x1e0 [ 353.558562][T11565] alloc_file_pseudo+0x92/0x120 [ 353.558676][T11565] anon_inode_getfd+0xc1/0x190 [ 353.558707][T11565] do_inotify_init+0x21d/0x280 [ 353.558804][T11565] __ia32_sys_inotify_init+0x10/0x20 [ 353.558840][T11565] x64_sys_call+0x1ef9/0x2550 [ 353.558872][T11565] do_syscall_64+0x112/0x360 [ 353.558921][T11565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.558984][T11565] RIP: 0033:0x7f2f5a7afb19 [ 353.559003][T11565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.559025][T11565] RSP: 002b:00007f2f59207028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 353.559048][T11565] RAX: ffffffffffffffda RBX: 00007f2f5aa35fa0 RCX: 00007f2f5a7afb19 [ 353.559090][T11565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 353.559106][T11565] RBP: 00007f2f5aa35fa0 R08: 0000000000000000 R09: 0000000000000000 [ 353.559119][T11565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.559134][T11565] R13: 00007f2f5aa36038 R14: 00007f2f5aa35fa0 R15: 00007ffc8362c238 [ 353.559153][T11565] [ 353.841323][T11571] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2301'. [ 354.061230][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2304'. [ 354.424147][ T8759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.722685][T11600] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.722710][T11600] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.764359][T11600] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.764520][T11600] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.795012][T11600] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.795057][T11600] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.828295][T11600] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.828340][T11600] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.884072][ T4354] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.884123][ T4354] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.888442][ T4354] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.888527][ T4354] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.891527][ T4354] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.891563][ T4354] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.963488][ T6779] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.963566][ T6779] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.334997][T11602] loop2: detected capacity change from 0 to 4096 [ 355.446297][T11602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.484731][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 355.484762][ T29] audit: type=1400 audit(1793740648.862:1269): avc: denied { write } for pid=11601 comm="syz.2.2310" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 355.567797][T11604] loop0: detected capacity change from 0 to 4096 [ 355.579699][T11619] tunl0: Caught tx_queue_len zero misconfig [ 355.602692][T11602] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #15: comm syz.2.2310: corrupted inode contents [ 355.603539][T11602] EXT4-fs error (device loop2): ext4_dirty_inode:7679: inode #15: comm syz.2.2310: mark_inode_dirty error [ 355.604607][T11602] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #15: comm syz.2.2310: corrupted inode contents [ 355.605559][T11602] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.2310: mark_inode_dirty error [ 355.606217][T11602] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #15: comm syz.2.2310: corrupted inode contents [ 355.609256][T11602] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.2310: mark_inode_dirty error [ 355.610151][T11602] EXT4-fs error (device loop2): ext4_do_update_inode:6707: inode #15: comm syz.2.2310: corrupted inode contents [ 355.610767][T11602] EXT4-fs error (device loop2): ext4_truncate:5538: inode #15: comm syz.2.2310: mark_inode_dirty error [ 355.611568][T11602] EXT4-fs error (device loop2) in ext4_setattr:7187: Corrupt filesystem [ 356.185756][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.256875][T11613] loop5: detected capacity change from 0 to 8192 [ 356.257368][T11623] can0: slcan on ttyS3. [ 356.303058][T11623] can0 (unregistered): slcan off ttyS3. [ 356.363340][T11613] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 356.569222][T11625] loop4: detected capacity change from 0 to 4096 [ 356.624963][T11625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.645975][T11604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.692812][ T29] audit: type=1400 audit(1793740650.052:1270): avc: denied { write } for pid=11624 comm="syz.4.2317" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 356.721788][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.821100][ T29] audit: type=1400 audit(1793740650.202:1271): avc: denied { write } for pid=11603 comm="syz.0.2311" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 356.841980][T11634] tunl0: Caught tx_queue_len zero misconfig [ 356.920151][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.945086][T11643] loop0: detected capacity change from 0 to 128 [ 356.945544][T11643] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 356.996895][T11643] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 357.008737][T11643] ext2 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.473913][T11639] loop4: detected capacity change from 0 to 8192 [ 357.511939][T11639] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 357.602750][T11648] xt_hashlimit: overflow, try lower: 0/0 [ 357.806134][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 357.808682][T11658] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2328'. [ 357.946900][T11661] loop4: detected capacity change from 0 to 8192 [ 357.958178][T11661] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 358.075288][T11670] ./dev/sda1: Can't lookup blockdev [ 358.252586][T11678] ./dev/sda1: Can't lookup blockdev [ 358.267823][T11675] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2335'. [ 358.742293][T11660] loop0: detected capacity change from 0 to 8192 [ 358.761429][T11660] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 359.049190][T11697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2340'. [ 359.248562][T11708] ./dev/sda1: Can't lookup blockdev [ 359.638451][T11694] loop0: detected capacity change from 0 to 4096 [ 359.699913][T11694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.769481][ T29] audit: type=1400 audit(1793740653.142:1272): avc: denied { write } for pid=11693 comm="syz.0.2344" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 359.836259][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.880701][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2352'. [ 360.024992][T11730] loop4: detected capacity change from 0 to 128 [ 360.056299][T11730] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 360.090625][T11730] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 360.093434][T11730] ext2 filesystem being mounted at /469/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.228416][T11734] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2356'. [ 360.440592][T11738] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2358'. [ 360.458533][T11700] loop2: detected capacity change from 0 to 8192 [ 360.479324][T11700] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 360.665492][ T3293] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 360.841215][T11726] loop0: detected capacity change from 0 to 4096 [ 360.879695][T11726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.080687][T11726] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #15: comm syz.0.2353: corrupted inode contents [ 361.082536][ T29] audit: type=1400 audit(1793740654.412:1273): avc: denied { write } for pid=11725 comm="syz.0.2353" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 361.082565][ T29] audit: type=1400 audit(1793740654.462:1274): avc: denied { write } for pid=11725 comm="syz.0.2353" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 361.149382][ T29] audit: type=1400 audit(1793740654.532:1275): avc: denied { write } for pid=11725 comm="syz.0.2353" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 361.149539][ T29] audit: type=1400 audit(1793740654.532:1276): avc: denied { write } for pid=11725 comm="syz.0.2353" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 361.151896][T11726] EXT4-fs error (device loop0): ext4_dirty_inode:7679: inode #15: comm syz.0.2353: mark_inode_dirty error [ 361.221835][T11726] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #15: comm syz.0.2353: corrupted inode contents [ 361.223474][T11726] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.2353: mark_inode_dirty error [ 361.225100][T11726] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #15: comm syz.0.2353: corrupted inode contents [ 361.226397][T11726] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.2353: mark_inode_dirty error [ 361.228223][T11726] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #15: comm syz.0.2353: corrupted inode contents [ 361.228630][T11726] EXT4-fs error (device loop0): ext4_truncate:5538: inode #15: comm syz.0.2353: mark_inode_dirty error [ 361.229481][T11726] EXT4-fs error (device loop0) in ext4_setattr:7187: Corrupt filesystem [ 361.242769][T11750] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2363'. [ 361.252871][T11760] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #15: comm syz.0.2353: corrupted inode contents [ 361.306647][ T3300] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 361.306852][ T3300] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 361.306997][ T3300] EXT4-fs warning (device loop0): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 361.314958][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.466890][T11769] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2367'. [ 361.621655][T11772] FAULT_INJECTION: forcing a failure. [ 361.621655][T11772] name failslab, interval 1, probability 0, space 0, times 0 [ 361.621705][T11772] CPU: 1 UID: 0 PID: 11772 Comm: syz.2.2368 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 361.621793][T11772] Tainted: [W]=WARN [ 361.621800][T11772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 361.621813][T11772] Call Trace: [ 361.621820][T11772] [ 361.621850][T11772] __dump_stack+0x1d/0x30 [ 361.621880][T11772] dump_stack_lvl+0x95/0xd0 [ 361.621903][T11772] dump_stack+0x15/0x1b [ 361.621926][T11772] should_fail_ex+0x259/0x270 [ 361.621975][T11772] ? alloc_pipe_info+0xad/0x340 [ 361.622015][T11772] should_failslab+0x8c/0xb0 [ 361.622090][T11772] __kmalloc_cache_noprof+0x5d/0x3e0 [ 361.622180][T11772] ? alloc_pipe_info+0xad/0x340 [ 361.622256][T11772] ? get_next_ino+0x93/0xd0 [ 361.622280][T11772] alloc_pipe_info+0xad/0x340 [ 361.622314][T11772] create_pipe_files+0x64/0x440 [ 361.622345][T11772] __do_pipe_flags+0x44/0x140 [ 361.622416][T11772] do_pipe2+0x61/0x140 [ 361.622438][T11772] __x64_sys_pipe+0x21/0x30 [ 361.622457][T11772] x64_sys_call+0x24fd/0x2550 [ 361.622559][T11772] do_syscall_64+0x112/0x360 [ 361.622596][T11772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.622619][T11772] RIP: 0033:0x7f2f5a7afb19 [ 361.622634][T11772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.622657][T11772] RSP: 002b:00007f2f59207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 361.622680][T11772] RAX: ffffffffffffffda RBX: 00007f2f5aa35fa0 RCX: 00007f2f5a7afb19 [ 361.622735][T11772] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 361.622751][T11772] RBP: 00007f2f5a847b70 R08: 0000000000000000 R09: 0000000000000000 [ 361.622767][T11772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.622781][T11772] R13: 00007f2f5aa36038 R14: 00007f2f5aa35fa0 R15: 00007ffc8362c238 [ 361.622800][T11772] [ 362.032562][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 362.042571][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 363.401246][T11802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2379'. [ 363.508308][T11784] loop2: detected capacity change from 0 to 4096 [ 363.639589][T11784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.683293][ T29] audit: type=1400 audit(1793740657.042:1277): avc: denied { write } for pid=11783 comm="syz.2.2372" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 363.748948][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.943124][T11829] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2392'. [ 364.592621][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 364.793322][T11853] loop4: detected capacity change from 0 to 512 [ 364.803442][T11853] EXT4-fs: Ignoring removed orlov option [ 364.827280][T11853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.827449][T11853] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.923863][ T29] audit: type=1400 audit(1793740659.312:1278): avc: denied { write } for pid=11852 comm="syz.4.2400" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 367.111809][T11882] can0: slcan on ttyS3. [ 367.157195][T11882] can0 (unregistered): slcan off ttyS3. [ 367.183823][T11878] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2407'. [ 367.313021][T11845] loop5: detected capacity change from 0 to 4096 [ 367.384634][T11845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.409149][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.424107][ T29] audit: type=1400 audit(1793740660.802:1279): avc: denied { write } for pid=11844 comm="syz.5.2397" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 367.479979][T11845] tunl0: Caught tx_queue_len zero misconfig [ 367.656785][ T8759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.659991][T11901] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2417'. [ 368.958724][T11932] loop2: detected capacity change from 0 to 512 [ 368.991397][T11932] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 368.992387][T11932] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 369.060044][T11932] EXT4-fs (loop2): 1 truncate cleaned up [ 369.082631][T11932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.192530][ T29] audit: type=1400 audit(1793740662.562:1280): avc: denied { write } for pid=11931 comm="syz.2.2424" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 369.349680][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.465471][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2436'. [ 370.530235][T11971] ./dev/sda1: Can't lookup blockdev [ 371.277060][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2438'. [ 373.280960][T11980] loop0: detected capacity change from 0 to 8192 [ 373.288316][T11980] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 373.749613][T12020] loop0: detected capacity change from 0 to 512 [ 373.773606][T12020] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 373.773623][T12020] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 373.807992][T12020] EXT4-fs (loop0): 1 truncate cleaned up [ 373.808415][T12020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.825652][ T29] audit: type=1400 audit(1793740667.212:1281): avc: denied { write } for pid=12019 comm="syz.0.2456" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 374.381457][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.470507][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2458'. [ 374.860295][T12043] No source specified [ 375.888602][T12075] ip_tables: iptables: counters copy to user failed while replacing table [ 376.054246][T12077] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2473'. [ 376.316772][T12077] syz.4.2473 (12077) used greatest stack depth: 8456 bytes left [ 376.548814][T12087] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2476'. [ 376.836268][T12103] FAULT_INJECTION: forcing a failure. [ 376.836268][T12103] name failslab, interval 1, probability 0, space 0, times 0 [ 376.836319][T12103] CPU: 0 UID: 0 PID: 12103 Comm: syz.5.2481 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 376.836428][T12103] Tainted: [W]=WARN [ 376.836436][T12103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 376.836450][T12103] Call Trace: [ 376.836457][T12103] [ 376.836466][T12103] __dump_stack+0x1d/0x30 [ 376.836546][T12103] dump_stack_lvl+0x95/0xd0 [ 376.836576][T12103] dump_stack+0x15/0x1b [ 376.836601][T12103] should_fail_ex+0x259/0x270 [ 376.836684][T12103] should_failslab+0x8c/0xb0 [ 376.836717][T12103] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 376.836770][T12103] ? __d_alloc+0x34/0x320 [ 376.836796][T12103] ? __d_alloc+0x34/0x320 [ 376.836885][T12103] __d_alloc+0x34/0x320 [ 376.836912][T12103] ? d_alloc_pseudo+0x13/0x80 [ 376.836941][T12103] d_alloc_pseudo+0x1e/0x80 [ 376.836997][T12103] alloc_path_pseudo+0xa4/0x140 [ 376.837026][T12103] alloc_file_pseudo+0x55/0x120 [ 376.837052][T12103] create_pipe_files+0x1bb/0x440 [ 376.837071][T12103] __do_pipe_flags+0x44/0x140 [ 376.837123][T12103] do_pipe2+0x61/0x140 [ 376.837146][T12103] ? switch_fpu_return+0xe7/0x1b0 [ 376.837218][T12103] __x64_sys_pipe+0x21/0x30 [ 376.837241][T12103] x64_sys_call+0x24fd/0x2550 [ 376.837371][T12103] do_syscall_64+0x112/0x360 [ 376.837405][T12103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.837434][T12103] RIP: 0033:0x7f5316e8fb19 [ 376.837450][T12103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.837510][T12103] RSP: 002b:00007f53158df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 376.837531][T12103] RAX: ffffffffffffffda RBX: 00007f5317115fa0 RCX: 00007f5316e8fb19 [ 376.837549][T12103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 376.837571][T12103] RBP: 00007f5316f27b70 R08: 0000000000000000 R09: 0000000000000000 [ 376.837586][T12103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.837662][T12103] R13: 00007f5317116038 R14: 00007f5317115fa0 R15: 00007ffe81687e88 [ 376.837688][T12103] [ 377.248425][T12120] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2488'. [ 377.674474][T12118] loop0: detected capacity change from 0 to 4096 [ 377.707180][T12118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.708545][ T29] audit: type=1400 audit(1793740671.092:1282): avc: denied { write } for pid=12117 comm="syz.0.2487" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 377.710504][T12118] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #15: comm syz.0.2487: corrupted inode contents [ 377.710772][T12118] EXT4-fs error (device loop0): ext4_dirty_inode:7679: inode #15: comm syz.0.2487: mark_inode_dirty error [ 377.711045][T12118] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #15: comm syz.0.2487: corrupted inode contents [ 377.711358][T12118] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.2487: mark_inode_dirty error [ 377.711691][T12118] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #15: comm syz.0.2487: corrupted inode contents [ 377.712013][T12118] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.2487: mark_inode_dirty error [ 377.712361][T12118] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #15: comm syz.0.2487: corrupted inode contents [ 377.715285][T12118] EXT4-fs error (device loop0): ext4_truncate:5538: inode #15: comm syz.0.2487: mark_inode_dirty error [ 377.715923][T12118] EXT4-fs error (device loop0) in ext4_setattr:7187: Corrupt filesystem [ 377.720947][ T29] audit: type=1400 audit(1793740671.102:1283): avc: denied { write } for pid=12117 comm="syz.0.2487" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 377.734503][ T29] audit: type=1400 audit(1793740671.112:1284): avc: denied { write } for pid=12117 comm="syz.0.2487" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 377.735772][T12118] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #15: comm syz.0.2487: corrupted inode contents [ 377.735941][ T29] audit: type=1400 audit(1793740671.112:1285): avc: denied { write } for pid=12117 comm="syz.0.2487" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 377.806927][ T11] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 377.807776][ T11] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 377.807876][ T11] EXT4-fs warning (device loop0): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 377.808344][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.321373][T12168] ip_tables: iptables: counters copy to user failed while replacing table [ 379.373429][T12192] FAULT_INJECTION: forcing a failure. [ 379.373429][T12192] name failslab, interval 1, probability 0, space 0, times 0 [ 379.373506][T12192] CPU: 0 UID: 0 PID: 12192 Comm: syz.0.2514 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 379.373538][T12192] Tainted: [W]=WARN [ 379.373547][T12192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 379.373596][T12192] Call Trace: [ 379.373602][T12192] [ 379.373610][T12192] __dump_stack+0x1d/0x30 [ 379.373710][T12192] dump_stack_lvl+0x95/0xd0 [ 379.373839][T12192] dump_stack+0x15/0x1b [ 379.373925][T12192] should_fail_ex+0x259/0x270 [ 379.373958][T12192] should_failslab+0x8c/0xb0 [ 379.373998][T12192] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 379.374067][T12192] ? __d_alloc+0x34/0x320 [ 379.374097][T12192] ? __d_alloc+0x34/0x320 [ 379.374140][T12192] __d_alloc+0x34/0x320 [ 379.374165][T12192] ? d_alloc_pseudo+0x13/0x80 [ 379.374195][T12192] d_alloc_pseudo+0x1e/0x80 [ 379.374229][T12192] alloc_path_pseudo+0xa4/0x140 [ 379.374309][T12192] alloc_file_pseudo+0x55/0x120 [ 379.374341][T12192] create_pipe_files+0x1bb/0x440 [ 379.374365][T12192] __do_pipe_flags+0x44/0x140 [ 379.374385][T12192] do_pipe2+0x61/0x140 [ 379.374443][T12192] __x64_sys_pipe+0x21/0x30 [ 379.374461][T12192] x64_sys_call+0x24fd/0x2550 [ 379.374534][T12192] do_syscall_64+0x112/0x360 [ 379.374570][T12192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.374641][T12192] RIP: 0033:0x7fe24f7ffb19 [ 379.374657][T12192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.374675][T12192] RSP: 002b:00007fe24e257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 379.374802][T12192] RAX: ffffffffffffffda RBX: 00007fe24fa85fa0 RCX: 00007fe24f7ffb19 [ 379.374817][T12192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 379.374830][T12192] RBP: 00007fe24f897b70 R08: 0000000000000000 R09: 0000000000000000 [ 379.374843][T12192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.374863][T12192] R13: 00007fe24fa86038 R14: 00007fe24fa85fa0 R15: 00007fff66f613a8 [ 379.374887][T12192] [ 379.636632][T12196] FAULT_INJECTION: forcing a failure. [ 379.636632][T12196] name failslab, interval 1, probability 0, space 0, times 0 [ 379.636795][T12196] CPU: 0 UID: 0 PID: 12196 Comm: syz.4.2516 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 379.636907][T12196] Tainted: [W]=WARN [ 379.636914][T12196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 379.636929][T12196] Call Trace: [ 379.636937][T12196] [ 379.636947][T12196] __dump_stack+0x1d/0x30 [ 379.636973][T12196] dump_stack_lvl+0x95/0xd0 [ 379.637004][T12196] dump_stack+0x15/0x1b [ 379.637027][T12196] should_fail_ex+0x259/0x270 [ 379.637061][T12196] ? alloc_empty_file+0x70/0x1e0 [ 379.637161][T12196] should_failslab+0x8c/0xb0 [ 379.637269][T12196] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 379.637366][T12196] ? alloc_empty_file+0x70/0x1e0 [ 379.637392][T12196] alloc_empty_file+0x70/0x1e0 [ 379.637480][T12196] alloc_file_pseudo+0x92/0x120 [ 379.637511][T12196] anon_inode_getfd+0xc1/0x190 [ 379.637535][T12196] do_inotify_init+0x21d/0x280 [ 379.637619][T12196] __ia32_sys_inotify_init+0x10/0x20 [ 379.637661][T12196] x64_sys_call+0x1ef9/0x2550 [ 379.637687][T12196] do_syscall_64+0x112/0x360 [ 379.637751][T12196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.637776][T12196] RIP: 0033:0x7f15db35fb19 [ 379.637792][T12196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.637810][T12196] RSP: 002b:00007f15d9daf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 379.637853][T12196] RAX: ffffffffffffffda RBX: 00007f15db5e5fa0 RCX: 00007f15db35fb19 [ 379.637902][T12196] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 379.637917][T12196] RBP: 00007f15db5e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 379.637929][T12196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.637942][T12196] R13: 00007f15db5e6038 R14: 00007f15db5e5fa0 R15: 00007fffa0dd1458 [ 379.637960][T12196] [ 380.351262][T12221] ./dev/sda1: Can't lookup blockdev [ 380.577553][T12236] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2531'. [ 380.836051][T12245] ip_tables: iptables: counters copy to user failed while replacing table [ 381.044292][T12250] ./dev/sda1: Can't lookup blockdev [ 381.381505][T12256] FAULT_INJECTION: forcing a failure. [ 381.381505][T12256] name failslab, interval 1, probability 0, space 0, times 0 [ 381.381547][T12256] CPU: 1 UID: 0 PID: 12256 Comm: syz.4.2539 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 381.381590][T12256] Tainted: [W]=WARN [ 381.381598][T12256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 381.381630][T12256] Call Trace: [ 381.381637][T12256] [ 381.381645][T12256] __dump_stack+0x1d/0x30 [ 381.381673][T12256] dump_stack_lvl+0x95/0xd0 [ 381.381702][T12256] dump_stack+0x15/0x1b [ 381.381809][T12256] should_fail_ex+0x259/0x270 [ 381.381839][T12256] ? alloc_pipe_info+0xad/0x340 [ 381.381871][T12256] should_failslab+0x8c/0xb0 [ 381.381966][T12256] __kmalloc_cache_noprof+0x5d/0x3e0 [ 381.381999][T12256] ? alloc_pipe_info+0xad/0x340 [ 381.382063][T12256] alloc_pipe_info+0xad/0x340 [ 381.382097][T12256] create_pipe_files+0x64/0x440 [ 381.382121][T12256] __do_pipe_flags+0x44/0x140 [ 381.382142][T12256] do_pipe2+0x61/0x140 [ 381.382186][T12256] __x64_sys_pipe+0x21/0x30 [ 381.382209][T12256] x64_sys_call+0x24fd/0x2550 [ 381.382236][T12256] do_syscall_64+0x112/0x360 [ 381.382286][T12256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.382313][T12256] RIP: 0033:0x7f15db35fb19 [ 381.382333][T12256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.382356][T12256] RSP: 002b:00007f15d9daf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 381.382447][T12256] RAX: ffffffffffffffda RBX: 00007f15db5e5fa0 RCX: 00007f15db35fb19 [ 381.382460][T12256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 381.382472][T12256] RBP: 00007f15db3f7b70 R08: 0000000000000000 R09: 0000000000000000 [ 381.382486][T12256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.382500][T12256] R13: 00007f15db5e6038 R14: 00007f15db5e5fa0 R15: 00007fffa0dd1458 [ 381.382521][T12256] [ 381.683145][T12258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2540'. [ 382.409152][T12289] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2552'. [ 382.695433][T12252] loop0: detected capacity change from 0 to 8192 [ 382.712888][T12252] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 382.877572][T12312] FAULT_INJECTION: forcing a failure. [ 382.877572][T12312] name failslab, interval 1, probability 0, space 0, times 0 [ 382.877685][T12312] CPU: 1 UID: 0 PID: 12312 Comm: syz.4.2562 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 382.877762][T12312] Tainted: [W]=WARN [ 382.877769][T12312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 382.877782][T12312] Call Trace: [ 382.877788][T12312] [ 382.877873][T12312] __dump_stack+0x1d/0x30 [ 382.877900][T12312] dump_stack_lvl+0x95/0xd0 [ 382.877965][T12312] dump_stack+0x15/0x1b [ 382.877989][T12312] should_fail_ex+0x259/0x270 [ 382.878035][T12312] ? alloc_pipe_info+0xad/0x340 [ 382.878070][T12312] should_failslab+0x8c/0xb0 [ 382.878103][T12312] __kmalloc_cache_noprof+0x5d/0x3e0 [ 382.878206][T12312] ? alloc_pipe_info+0xad/0x340 [ 382.878241][T12312] alloc_pipe_info+0xad/0x340 [ 382.878291][T12312] create_pipe_files+0x64/0x440 [ 382.878316][T12312] __do_pipe_flags+0x44/0x140 [ 382.878339][T12312] do_pipe2+0x61/0x140 [ 382.878408][T12312] ? switch_fpu_return+0xe7/0x1b0 [ 382.878434][T12312] __x64_sys_pipe+0x21/0x30 [ 382.878452][T12312] x64_sys_call+0x24fd/0x2550 [ 382.878481][T12312] do_syscall_64+0x112/0x360 [ 382.878590][T12312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.878613][T12312] RIP: 0033:0x7f15db35fb19 [ 382.878629][T12312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.878650][T12312] RSP: 002b:00007f15d9daf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 382.878676][T12312] RAX: ffffffffffffffda RBX: 00007f15db5e5fa0 RCX: 00007f15db35fb19 [ 382.878771][T12312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 382.878787][T12312] RBP: 00007f15db3f7b70 R08: 0000000000000000 R09: 0000000000000000 [ 382.878803][T12312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.878816][T12312] R13: 00007f15db5e6038 R14: 00007f15db5e5fa0 R15: 00007fffa0dd1458 [ 382.878846][T12312] [ 383.235085][T12318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2564'. [ 383.593726][T12301] loop2: detected capacity change from 0 to 4096 [ 383.636769][T12296] tunl0: Caught tx_queue_len zero misconfig [ 383.704657][T12301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.726394][ T29] audit: type=1400 audit(1793740677.112:1286): avc: denied { write } for pid=12299 comm="syz.2.2557" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 383.820425][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.276334][T12331] loop4: detected capacity change from 0 to 4096 [ 384.371168][T12331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.423020][ T29] audit: type=1400 audit(1793740677.802:1287): avc: denied { write } for pid=12330 comm="syz.4.2567" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 384.493529][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.553426][T12354] loop5: detected capacity change from 0 to 8192 [ 384.597283][T12354] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 384.660696][T12358] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2576'. [ 384.879147][T12375] FAULT_INJECTION: forcing a failure. [ 384.879147][T12375] name failslab, interval 1, probability 0, space 0, times 0 [ 384.879237][T12375] CPU: 1 UID: 0 PID: 12375 Comm: syz.2.2582 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 384.879324][T12375] Tainted: [W]=WARN [ 384.879333][T12375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 384.879362][T12375] Call Trace: [ 384.879370][T12375] [ 384.879380][T12375] __dump_stack+0x1d/0x30 [ 384.879409][T12375] dump_stack_lvl+0x95/0xd0 [ 384.879493][T12375] dump_stack+0x15/0x1b [ 384.879514][T12375] should_fail_ex+0x259/0x270 [ 384.879545][T12375] ? security_file_alloc+0x32/0xf0 [ 384.879576][T12375] should_failslab+0x8c/0xb0 [ 384.879627][T12375] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 384.879658][T12375] ? security_file_alloc+0x32/0xf0 [ 384.879694][T12375] security_file_alloc+0x32/0xf0 [ 384.879789][T12375] init_file+0x5b/0x1b0 [ 384.879812][T12375] alloc_empty_file+0x85/0x1e0 [ 384.879839][T12375] alloc_file_pseudo+0x92/0x120 [ 384.879886][T12375] anon_inode_getfd+0xc1/0x190 [ 384.879911][T12375] do_inotify_init+0x21d/0x280 [ 384.879943][T12375] __ia32_sys_inotify_init+0x10/0x20 [ 384.880010][T12375] x64_sys_call+0x1ef9/0x2550 [ 384.880116][T12375] do_syscall_64+0x112/0x360 [ 384.880224][T12375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.880252][T12375] RIP: 0033:0x7f2f5a7afb19 [ 384.880269][T12375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.880292][T12375] RSP: 002b:00007f2f59207028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 384.880349][T12375] RAX: ffffffffffffffda RBX: 00007f2f5aa35fa0 RCX: 00007f2f5a7afb19 [ 384.880367][T12375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 384.880382][T12375] RBP: 00007f2f5aa35fa0 R08: 0000000000000000 R09: 0000000000000000 [ 384.880399][T12375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.880415][T12375] R13: 00007f2f5aa36038 R14: 00007f2f5aa35fa0 R15: 00007ffc8362c238 [ 384.880512][T12375] [ 385.053730][T12386] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2587'. [ 385.178773][T12394] loop4: detected capacity change from 0 to 8192 [ 385.766155][ T28] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 385.822749][ T28] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 385.935027][T12392] loop5: detected capacity change from 0 to 8192 [ 385.961510][T12392] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 386.467157][T12424] loop5: detected capacity change from 0 to 4096 [ 386.566395][T12424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.587541][ T29] audit: type=1400 audit(1793740679.972:1288): avc: denied { write } for pid=12423 comm="syz.5.2600" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 386.630047][T12431] can0: slcan on ttyS3. [ 386.744321][T12424] tunl0: Caught tx_queue_len zero misconfig [ 386.762972][T12431] can0 (unregistered): slcan off ttyS3. [ 386.781557][ T8759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.952713][T12445] loop0: detected capacity change from 0 to 512 [ 387.041436][T12445] loop0: detected capacity change from 0 to 1024 [ 387.269706][T12457] loop0: detected capacity change from 0 to 8192 [ 387.270661][T12457] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 387.409944][T12461] No source specified [ 387.998700][T12459] loop0: detected capacity change from 0 to 8192 [ 388.013159][T12459] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 388.401479][T12465] loop5: detected capacity change from 0 to 4096 [ 388.431451][T12465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.458874][ T29] audit: type=1400 audit(1793740681.842:1289): avc: denied { write } for pid=12464 comm="syz.5.2615" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 388.647024][ T8759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.696216][T12491] No source specified [ 388.721074][T12497] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2625'. [ 388.751585][T12496] loop0: detected capacity change from 0 to 8192 [ 388.895985][T12501] can0: slcan on ttyS3. [ 389.082581][T12501] can0 (unregistered): slcan off ttyS3. [ 389.625396][ T7336] batman_adv: batadv0: Interface deactivated: syz_tun [ 389.627558][ T7336] batman_adv: batadv0: Removing interface: syz_tun [ 389.741969][ T6779] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.770061][T12508] can0: slcan on ttyS3. [ 389.810305][ T6779] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.871153][ T6779] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.917475][T12512] FAULT_INJECTION: forcing a failure. [ 389.917475][T12512] name failslab, interval 1, probability 0, space 0, times 0 [ 389.917628][T12512] CPU: 1 UID: 0 PID: 12512 Comm: syz.0.2631 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 389.917727][T12512] Tainted: [W]=WARN [ 389.917735][T12512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 389.917759][T12512] Call Trace: [ 389.917766][T12512] [ 389.917775][T12512] __dump_stack+0x1d/0x30 [ 389.917805][T12512] dump_stack_lvl+0x95/0xd0 [ 389.917851][T12512] dump_stack+0x15/0x1b [ 389.917945][T12512] should_fail_ex+0x259/0x270 [ 389.917989][T12512] ? alloc_pipe_info+0x1c8/0x340 [ 389.918026][T12512] should_failslab+0x8c/0xb0 [ 389.918058][T12512] __kmalloc_noprof+0xb6/0x4b0 [ 389.918162][T12512] ? alloc_pipe_info+0x1c8/0x340 [ 389.918203][T12512] alloc_pipe_info+0x1c8/0x340 [ 389.918244][T12512] create_pipe_files+0x64/0x440 [ 389.918294][T12512] __do_pipe_flags+0x44/0x140 [ 389.918317][T12512] do_pipe2+0x61/0x140 [ 389.918414][T12512] ? switch_fpu_return+0xe7/0x1b0 [ 389.918445][T12512] __x64_sys_pipe+0x21/0x30 [ 389.918467][T12512] x64_sys_call+0x24fd/0x2550 [ 389.918588][T12512] do_syscall_64+0x112/0x360 [ 389.918625][T12512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.918652][T12512] RIP: 0033:0x7fe24f7ffb19 [ 389.918718][T12512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.918771][T12512] RSP: 002b:00007fe24e257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 389.918851][T12512] RAX: ffffffffffffffda RBX: 00007fe24fa85fa0 RCX: 00007fe24f7ffb19 [ 389.918867][T12512] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 389.918881][T12512] RBP: 00007fe24f897b70 R08: 0000000000000000 R09: 0000000000000000 [ 389.918898][T12512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.918914][T12512] R13: 00007fe24fa86038 R14: 00007fe24fa85fa0 R15: 00007fff66f613a8 [ 389.918938][T12512] [ 389.986253][ T6779] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.121180][T12510] rxe_eth0 speed is unknown, defaulting to 1000 [ 390.158592][ T6779] bridge_slave_1: left allmulticast mode [ 390.158617][ T6779] bridge_slave_1: left promiscuous mode [ 390.158736][ T6779] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.159660][ T6779] bridge_slave_0: left allmulticast mode [ 390.159679][ T6779] bridge_slave_0: left promiscuous mode [ 390.159827][ T6779] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.164016][ T6779] dvmrp1: left allmulticast mode [ 390.276622][ T29] audit: type=1400 audit(1793740683.662:1290): avc: denied { write } for pid=12524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.308870][ T6779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.310122][ T6779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.330576][ T6779] bond0 (unregistering): Released all slaves [ 390.336124][ T6779] bond1 (unregistering): Released all slaves [ 390.348737][ T29] audit: type=1400 audit(1793740683.732:1291): avc: denied { write } for pid=12540 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.363022][T12538] tunl0: Caught tx_queue_len zero misconfig [ 390.432885][T12504] can0 (unregistered): slcan off ttyS3. [ 390.559125][ T6779] hsr_slave_0: left promiscuous mode [ 390.559450][ T6779] hsr_slave_1: left promiscuous mode [ 390.560093][ T6779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.560108][ T6779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.567975][ T6779] veth1_macvtap: left promiscuous mode [ 390.568001][ T6779] veth0_macvtap: left promiscuous mode [ 390.568049][ T6779] veth1_vlan: left promiscuous mode [ 390.568121][ T6779] veth0_vlan: left promiscuous mode [ 390.679801][T12551] No source specified [ 390.711189][ T29] audit: type=1400 audit(1793740684.092:1292): avc: denied { write } for pid=12545 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.715994][ T6779] team0 (unregistering): Port device team_slave_1 removed [ 390.738120][ T6779] team0 (unregistering): Port device team_slave_0 removed [ 390.770563][ T29] audit: type=1400 audit(1793740684.152:1293): avc: denied { write } for pid=12559 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.818307][ T3017] 8021q: adding VLAN 0 to HW filter on device eth6 [ 390.834460][T12522] loop4: detected capacity change from 0 to 4096 [ 390.957682][T12522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.994439][ T29] audit: type=1400 audit(1793740684.382:1294): avc: denied { write } for pid=12521 comm="syz.4.2632" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 391.047035][T12510] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.047074][T12510] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.047240][T12510] bridge_slave_0: entered allmulticast mode [ 391.047788][T12510] bridge_slave_0: entered promiscuous mode [ 391.062671][ T29] audit: type=1400 audit(1793740684.442:1295): avc: denied { write } for pid=12567 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.100086][T12510] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.102097][T12490] loop2: detected capacity change from 0 to 8192 [ 391.102169][ T29] audit: type=1400 audit(1793740684.482:1296): avc: denied { write } for pid=12587 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.138221][T12510] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.138327][T12510] bridge_slave_1: entered allmulticast mode [ 391.138920][T12510] bridge_slave_1: entered promiscuous mode [ 391.156369][T12490] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 391.170799][ T3017] 8021q: adding VLAN 0 to HW filter on device eth7 [ 391.192146][T12510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.202755][T12510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.219368][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.231847][T12510] team0: Port device team_slave_0 added [ 391.238532][T12510] team0: Port device team_slave_1 added [ 391.254845][T12510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.254860][T12510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.254933][T12510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.255497][T12510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.255553][T12510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.255619][T12510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.330298][T12510] hsr_slave_0: entered promiscuous mode [ 391.330772][T12510] hsr_slave_1: entered promiscuous mode [ 391.330984][T12510] debugfs: 'hsr0' already exists in 'hsr' [ 391.330997][T12510] Cannot create hsr debugfs directory [ 391.429307][ T29] audit: type=1400 audit(1793740684.812:1297): avc: denied { write } for pid=12592 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.470973][T12569] loop5: detected capacity change from 0 to 4096 [ 391.492562][ T29] audit: type=1400 audit(1793740684.882:1298): avc: denied { write } for pid=12609 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.498772][T12569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.524432][ T29] audit: type=1400 audit(1793740684.882:1299): avc: denied { write } for pid=12560 comm="syz.5.2636" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 391.848201][ T8759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.006370][T12614] FAULT_INJECTION: forcing a failure. [ 392.006370][T12614] name failslab, interval 1, probability 0, space 0, times 0 [ 392.006745][T12614] CPU: 1 UID: 0 PID: 12614 Comm: syz.0.2642 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 392.006780][T12614] Tainted: [W]=WARN [ 392.006788][T12614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 392.006862][T12614] Call Trace: [ 392.006871][T12614] [ 392.006957][T12614] __dump_stack+0x1d/0x30 [ 392.006985][T12614] dump_stack_lvl+0x95/0xd0 [ 392.007032][T12614] dump_stack+0x15/0x1b [ 392.007058][T12614] should_fail_ex+0x259/0x270 [ 392.007155][T12614] ? alloc_pipe_info+0x1c8/0x340 [ 392.007194][T12614] should_failslab+0x8c/0xb0 [ 392.007232][T12614] __kmalloc_noprof+0xb6/0x4b0 [ 392.007386][T12614] ? alloc_pipe_info+0x1c8/0x340 [ 392.007420][T12614] alloc_pipe_info+0x1c8/0x340 [ 392.007504][T12614] create_pipe_files+0x64/0x440 [ 392.007526][T12614] __do_pipe_flags+0x44/0x140 [ 392.007545][T12614] do_pipe2+0x61/0x140 [ 392.007571][T12614] __x64_sys_pipe+0x21/0x30 [ 392.007639][T12614] x64_sys_call+0x24fd/0x2550 [ 392.007665][T12614] do_syscall_64+0x112/0x360 [ 392.007702][T12614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.007737][T12614] RIP: 0033:0x7fe24f7ffb19 [ 392.007775][T12614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.007793][T12614] RSP: 002b:00007fe24e257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 392.007813][T12614] RAX: ffffffffffffffda RBX: 00007fe24fa85fa0 RCX: 00007fe24f7ffb19 [ 392.007827][T12614] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 392.007842][T12614] RBP: 00007fe24f897b70 R08: 0000000000000000 R09: 0000000000000000 [ 392.007925][T12614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.007941][T12614] R13: 00007fe24fa86038 R14: 00007fe24fa85fa0 R15: 00007fff66f613a8 [ 392.007964][T12614] [ 392.062684][ T3017] 8021q: adding VLAN 0 to HW filter on device eth5 [ 392.241055][T12624] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2644'. [ 392.242184][T12619] loop0: detected capacity change from 0 to 128 [ 392.301974][T12619] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 392.321847][T12619] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 392.322911][T12619] ext2 filesystem being mounted at /537/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.520984][T12510] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 392.528198][T12510] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 392.528616][T12510] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 392.547625][T12510] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.548096][T12510] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 392.553279][T12510] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.554856][T12510] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 392.569465][T12510] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 392.714945][T12510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.735774][T12638] loop5: detected capacity change from 0 to 8192 [ 392.761203][T12510] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.772080][ T4354] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.772112][ T4354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.783205][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.783281][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.803873][T12638] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 393.043614][T12510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.052898][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 393.279785][T12594] loop4: detected capacity change from 0 to 8192 [ 393.313959][T12510] veth0_vlan: entered promiscuous mode [ 393.320191][T12510] veth1_vlan: entered promiscuous mode [ 393.335064][T12510] veth0_macvtap: entered promiscuous mode [ 393.337044][T12510] veth1_macvtap: entered promiscuous mode [ 393.345086][T12510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.351530][T12510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.365517][T12594] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 393.403297][ T107] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.403473][ T107] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.403509][ T107] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.403547][ T107] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.825239][T12740] FAULT_INJECTION: forcing a failure. [ 393.825239][T12740] name failslab, interval 1, probability 0, space 0, times 0 [ 393.825291][T12740] CPU: 0 UID: 0 PID: 12740 Comm: syz.0.2652 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 393.825374][T12740] Tainted: [W]=WARN [ 393.825444][T12740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 393.825526][T12740] Call Trace: [ 393.825534][T12740] [ 393.825544][T12740] __dump_stack+0x1d/0x30 [ 393.825639][T12740] dump_stack_lvl+0x95/0xd0 [ 393.825664][T12740] dump_stack+0x15/0x1b [ 393.825686][T12740] should_fail_ex+0x259/0x270 [ 393.825755][T12740] ? alloc_pipe_info+0xad/0x340 [ 393.825795][T12740] should_failslab+0x8c/0xb0 [ 393.825832][T12740] __kmalloc_cache_noprof+0x5d/0x3e0 [ 393.825940][T12740] ? alloc_pipe_info+0xad/0x340 [ 393.826048][T12740] alloc_pipe_info+0xad/0x340 [ 393.826089][T12740] create_pipe_files+0x64/0x440 [ 393.826113][T12740] __do_pipe_flags+0x44/0x140 [ 393.826201][T12740] do_pipe2+0x61/0x140 [ 393.826281][T12740] ? switch_fpu_return+0xe7/0x1b0 [ 393.826313][T12740] __x64_sys_pipe+0x21/0x30 [ 393.826334][T12740] x64_sys_call+0x24fd/0x2550 [ 393.826450][T12740] do_syscall_64+0x112/0x360 [ 393.826493][T12740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.826570][T12740] RIP: 0033:0x7fe24f7ffb19 [ 393.826590][T12740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.826613][T12740] RSP: 002b:00007fe24e257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 393.826638][T12740] RAX: ffffffffffffffda RBX: 00007fe24fa85fa0 RCX: 00007fe24f7ffb19 [ 393.826652][T12740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 393.826666][T12740] RBP: 00007fe24f897b70 R08: 0000000000000000 R09: 0000000000000000 [ 393.826695][T12740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.826777][T12740] R13: 00007fe24fa86038 R14: 00007fe24fa85fa0 R15: 00007fff66f613a8 [ 393.826802][T12740] [ 393.950703][T12748] loop0: detected capacity change from 0 to 8192 [ 394.032533][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 395.210164][T12781] can0: slcan on ttyS3. [ 395.271517][T12783] FAULT_INJECTION: forcing a failure. [ 395.271517][T12783] name failslab, interval 1, probability 0, space 0, times 0 [ 395.271577][T12783] CPU: 1 UID: 0 PID: 12783 Comm: syz.3.2663 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 395.271615][T12783] Tainted: [W]=WARN [ 395.271623][T12783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 395.271638][T12783] Call Trace: [ 395.271646][T12783] [ 395.271654][T12783] __dump_stack+0x1d/0x30 [ 395.271742][T12783] dump_stack_lvl+0x95/0xd0 [ 395.271768][T12783] dump_stack+0x15/0x1b [ 395.271789][T12783] should_fail_ex+0x259/0x270 [ 395.271818][T12783] should_failslab+0x8c/0xb0 [ 395.271902][T12783] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 395.271984][T12783] ? __d_alloc+0x34/0x320 [ 395.272010][T12783] ? __d_alloc+0x34/0x320 [ 395.272064][T12783] __d_alloc+0x34/0x320 [ 395.272171][T12783] ? d_alloc_pseudo+0x13/0x80 [ 395.272222][T12783] d_alloc_pseudo+0x1e/0x80 [ 395.272295][T12783] alloc_path_pseudo+0xa4/0x140 [ 395.272325][T12783] alloc_file_pseudo+0x55/0x120 [ 395.272357][T12783] create_pipe_files+0x1bb/0x440 [ 395.272438][T12783] __do_pipe_flags+0x44/0x140 [ 395.272514][T12783] do_pipe2+0x61/0x140 [ 395.272537][T12783] ? switch_fpu_return+0xe7/0x1b0 [ 395.272563][T12783] __x64_sys_pipe+0x21/0x30 [ 395.272590][T12783] x64_sys_call+0x24fd/0x2550 [ 395.272621][T12783] do_syscall_64+0x112/0x360 [ 395.272732][T12783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.272755][T12783] RIP: 0033:0x7f41668bfb19 [ 395.272771][T12783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.272790][T12783] RSP: 002b:00007f416530f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 395.272888][T12783] RAX: ffffffffffffffda RBX: 00007f4166b45fa0 RCX: 00007f41668bfb19 [ 395.272946][T12783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 395.272962][T12783] RBP: 00007f4166957b70 R08: 0000000000000000 R09: 0000000000000000 [ 395.273009][T12783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.273022][T12783] R13: 00007f4166b46038 R14: 00007f4166b45fa0 R15: 00007ffc04932b78 [ 395.273044][T12783] [ 395.312569][T12781] can0 (unregistered): slcan off ttyS3. [ 395.513348][T12786] loop3: detected capacity change from 0 to 512 [ 395.513902][T12786] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 395.513956][T12786] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 395.555320][T12786] EXT4-fs (loop3): 1 truncate cleaned up [ 395.555781][T12786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.561303][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 395.561316][ T29] audit: type=1400 audit(1793740688.942:1312): avc: denied { write } for pid=12785 comm="syz.3.2664" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 395.653242][T12510] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.853143][T12794] can0: slcan on ttyS3. [ 395.855072][T12703] loop2: detected capacity change from 0 to 8192 [ 395.861506][T12703] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 396.006720][T12806] loop3: detected capacity change from 0 to 8192 [ 396.039962][ T29] audit: type=1400 audit(1793740689.422:1313): avc: denied { write } for pid=12798 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.105818][T12779] can0 (unregistered): slcan off ttyS3. [ 396.149285][ T29] audit: type=1400 audit(1793740689.532:1314): avc: denied { write } for pid=12816 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.193702][T12820] loop4: detected capacity change from 0 to 512 [ 396.205645][T12820] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 396.205663][T12820] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 396.572565][ T29] audit: type=1400 audit(1793740689.942:1315): avc: denied { write } for pid=12826 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.655211][ T29] audit: type=1400 audit(1793740690.042:1316): avc: denied { write } for pid=12837 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.778783][T12820] EXT4-fs (loop4): 1 truncate cleaned up [ 396.779433][T12820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.026371][ T29] audit: type=1400 audit(1793740690.412:1317): avc: denied { write } for pid=12817 comm="syz.4.2671" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.321980][T12821] netlink: 596 bytes leftover after parsing attributes in process `syz.5.2670'. [ 397.854149][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.937614][T12856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2676'. [ 397.937804][T12856] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2676'. [ 398.433362][T12872] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2682'. [ 399.192334][T12886] loop0: detected capacity change from 0 to 512 [ 399.194443][T12886] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 399.194458][T12886] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 399.202217][T12886] EXT4-fs (loop0): 1 truncate cleaned up [ 399.202736][T12886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.228245][ T29] audit: type=1400 audit(1793740692.612:1318): avc: denied { write } for pid=12883 comm="syz.0.2685" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 399.450030][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2690'. [ 399.450295][T12897] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2690'. [ 399.787384][T12901] loop2: detected capacity change from 0 to 512 [ 399.943427][T12901] loop2: detected capacity change from 0 to 1024 [ 400.376162][T12911] FAULT_INJECTION: forcing a failure. [ 400.376162][T12911] name failslab, interval 1, probability 0, space 0, times 0 [ 400.376234][T12911] CPU: 0 UID: 0 PID: 12911 Comm: syz.2.2695 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 400.376272][T12911] Tainted: [W]=WARN [ 400.376279][T12911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 400.376321][T12911] Call Trace: [ 400.376329][T12911] [ 400.376337][T12911] __dump_stack+0x1d/0x30 [ 400.376371][T12911] dump_stack_lvl+0x95/0xd0 [ 400.376398][T12911] dump_stack+0x15/0x1b [ 400.376431][T12911] should_fail_ex+0x259/0x270 [ 400.376499][T12911] should_failslab+0x8c/0xb0 [ 400.376562][T12911] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 400.376671][T12911] ? __d_alloc+0x34/0x320 [ 400.376699][T12911] ? __d_alloc+0x34/0x320 [ 400.376738][T12911] __d_alloc+0x34/0x320 [ 400.376834][T12911] ? d_alloc_pseudo+0x13/0x80 [ 400.376916][T12911] d_alloc_pseudo+0x1e/0x80 [ 400.376951][T12911] alloc_path_pseudo+0xa4/0x140 [ 400.376981][T12911] alloc_file_pseudo+0x55/0x120 [ 400.377068][T12911] anon_inode_getfd+0xc1/0x190 [ 400.377100][T12911] do_inotify_init+0x21d/0x280 [ 400.377213][T12911] __ia32_sys_inotify_init+0x10/0x20 [ 400.377245][T12911] x64_sys_call+0x1ef9/0x2550 [ 400.377271][T12911] do_syscall_64+0x112/0x360 [ 400.377332][T12911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.377356][T12911] RIP: 0033:0x7f2f5a7afb19 [ 400.377372][T12911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.377393][T12911] RSP: 002b:00007f2f59207028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 400.377416][T12911] RAX: ffffffffffffffda RBX: 00007f2f5aa35fa0 RCX: 00007f2f5a7afb19 [ 400.377512][T12911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 400.377525][T12911] RBP: 00007f2f5aa35fa0 R08: 0000000000000000 R09: 0000000000000000 [ 400.377544][T12911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.377561][T12911] R13: 00007f2f5aa36038 R14: 00007f2f5aa35fa0 R15: 00007ffc8362c238 [ 400.377585][T12911] [ 400.718302][T12919] loop2: detected capacity change from 0 to 512 [ 401.191802][T12919] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 401.191818][T12919] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 401.234495][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.257727][T12919] EXT4-fs (loop2): 1 truncate cleaned up [ 401.258130][T12919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.403768][ T29] audit: type=1400 audit(1793740694.682:1319): avc: denied { write } for pid=12918 comm="syz.2.2699" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 401.496725][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.692873][T12931] loop5: detected capacity change from 0 to 512 [ 401.810359][T12931] loop5: detected capacity change from 0 to 1024 [ 402.015300][ T28] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 402.217151][T12953] FAULT_INJECTION: forcing a failure. [ 402.217151][T12953] name failslab, interval 1, probability 0, space 0, times 0 [ 402.217190][T12953] CPU: 1 UID: 0 PID: 12953 Comm: syz.3.2711 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 402.217229][T12953] Tainted: [W]=WARN [ 402.217287][T12953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 402.217366][T12953] Call Trace: [ 402.217376][T12953] [ 402.217386][T12953] __dump_stack+0x1d/0x30 [ 402.217500][T12953] dump_stack_lvl+0x95/0xd0 [ 402.217568][T12953] dump_stack+0x15/0x1b [ 402.217594][T12953] should_fail_ex+0x259/0x270 [ 402.217627][T12953] should_failslab+0x8c/0xb0 [ 402.217701][T12953] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 402.217797][T12953] ? __account_obj_stock+0x27f/0x2d0 [ 402.217913][T12953] ? __d_alloc+0x34/0x320 [ 402.217942][T12953] ? __d_alloc+0x34/0x320 [ 402.218012][T12953] ? __account_obj_stock+0x27f/0x2d0 [ 402.218047][T12953] __d_alloc+0x34/0x320 [ 402.218079][T12953] ? d_alloc_pseudo+0x13/0x80 [ 402.218253][T12953] d_alloc_pseudo+0x1e/0x80 [ 402.218285][T12953] alloc_path_pseudo+0xa4/0x140 [ 402.218316][T12953] alloc_file_pseudo+0x55/0x120 [ 402.218394][T12953] anon_inode_getfd+0xc1/0x190 [ 402.218472][T12953] do_inotify_init+0x21d/0x280 [ 402.218511][T12953] __ia32_sys_inotify_init+0x10/0x20 [ 402.218550][T12953] x64_sys_call+0x1ef9/0x2550 [ 402.218583][T12953] do_syscall_64+0x112/0x360 [ 402.218674][T12953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.218702][T12953] RIP: 0033:0x7f41668bfb19 [ 402.218722][T12953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.218746][T12953] RSP: 002b:00007f416530f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 402.218786][T12953] RAX: ffffffffffffffda RBX: 00007f4166b45fa0 RCX: 00007f41668bfb19 [ 402.218854][T12953] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 402.218870][T12953] RBP: 00007f4166b45fa0 R08: 0000000000000000 R09: 0000000000000000 [ 402.218942][T12953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.218965][T12953] R13: 00007f4166b46038 R14: 00007f4166b45fa0 R15: 00007ffc04932b78 [ 402.218989][T12953] [ 402.995479][ T28] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 403.366848][T12967] loop4: detected capacity change from 0 to 4096 [ 403.405359][T12967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.455129][ T29] audit: type=1400 audit(1793740696.842:1320): avc: denied { write } for pid=12966 comm="syz.4.2714" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 403.462029][T12967] EXT4-fs error (device loop4): ext4_do_update_inode:6707: inode #15: comm syz.4.2714: corrupted inode contents [ 403.462381][T12967] EXT4-fs error (device loop4): ext4_dirty_inode:7679: inode #15: comm syz.4.2714: mark_inode_dirty error [ 403.512002][T12967] EXT4-fs error (device loop4): ext4_do_update_inode:6707: inode #15: comm syz.4.2714: corrupted inode contents [ 403.526952][T12967] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.2714: mark_inode_dirty error [ 403.527991][T12967] EXT4-fs error (device loop4): ext4_do_update_inode:6707: inode #15: comm syz.4.2714: corrupted inode contents [ 403.529011][T12967] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.2714: mark_inode_dirty error [ 403.531194][T12967] EXT4-fs error (device loop4): ext4_do_update_inode:6707: inode #15: comm syz.4.2714: corrupted inode contents [ 403.581411][T12967] EXT4-fs error (device loop4): ext4_truncate:5538: inode #15: comm syz.4.2714: mark_inode_dirty error [ 403.582594][ T29] audit: type=1400 audit(1793740696.962:1321): avc: denied { write } for pid=12966 comm="syz.4.2714" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 403.584865][ T29] audit: type=1400 audit(1793740696.972:1322): avc: denied { write } for pid=12966 comm="syz.4.2714" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 403.584892][ T29] audit: type=1400 audit(1793740696.972:1323): avc: denied { write } for pid=12966 comm="syz.4.2714" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 403.586038][T12967] EXT4-fs error (device loop4) in ext4_setattr:7187: Corrupt filesystem [ 403.587381][T12984] EXT4-fs error (device loop4): ext4_do_update_inode:6707: inode #15: comm syz.4.2714: corrupted inode contents [ 403.729651][ T3293] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 403.729907][ T3293] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 403.730056][ T3293] EXT4-fs warning (device loop4): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 403.731587][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.793217][T12991] FAULT_INJECTION: forcing a failure. [ 403.793217][T12991] name failslab, interval 1, probability 0, space 0, times 0 [ 403.793271][T12991] CPU: 1 UID: 0 PID: 12991 Comm: syz.4.2722 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 403.793344][T12991] Tainted: [W]=WARN [ 403.793353][T12991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 403.793369][T12991] Call Trace: [ 403.793394][T12991] [ 403.793403][T12991] __dump_stack+0x1d/0x30 [ 403.793435][T12991] dump_stack_lvl+0x95/0xd0 [ 403.793555][T12991] dump_stack+0x15/0x1b [ 403.793576][T12991] should_fail_ex+0x259/0x270 [ 403.793611][T12991] should_failslab+0x8c/0xb0 [ 403.793695][T12991] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 403.793764][T12991] ? __account_obj_stock+0x27f/0x2d0 [ 403.793793][T12991] ? __d_alloc+0x34/0x320 [ 403.793828][T12991] ? __d_alloc+0x34/0x320 [ 403.793871][T12991] ? __account_obj_stock+0x27f/0x2d0 [ 403.793919][T12991] __d_alloc+0x34/0x320 [ 403.793975][T12991] ? d_alloc_pseudo+0x13/0x80 [ 403.794009][T12991] d_alloc_pseudo+0x1e/0x80 [ 403.794040][T12991] alloc_path_pseudo+0xa4/0x140 [ 403.794137][T12991] alloc_file_pseudo+0x55/0x120 [ 403.794165][T12991] anon_inode_getfd+0xc1/0x190 [ 403.794269][T12991] do_inotify_init+0x21d/0x280 [ 403.794306][T12991] __ia32_sys_inotify_init+0x10/0x20 [ 403.794403][T12991] x64_sys_call+0x1ef9/0x2550 [ 403.794435][T12991] do_syscall_64+0x112/0x360 [ 403.794530][T12991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.794554][T12991] RIP: 0033:0x7f15db35fb19 [ 403.794574][T12991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.794657][T12991] RSP: 002b:00007f15d9daf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 403.794680][T12991] RAX: ffffffffffffffda RBX: 00007f15db5e5fa0 RCX: 00007f15db35fb19 [ 403.794699][T12991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 403.794714][T12991] RBP: 00007f15db5e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 403.794731][T12991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.794752][T12991] R13: 00007f15db5e6038 R14: 00007f15db5e5fa0 R15: 00007fffa0dd1458 [ 403.794771][T12991] [ 404.412221][T13013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2731'. [ 404.414587][T13013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2731'. [ 404.625235][T13017] FAULT_INJECTION: forcing a failure. [ 404.625235][T13017] name failslab, interval 1, probability 0, space 0, times 0 [ 404.625287][T13017] CPU: 0 UID: 0 PID: 13017 Comm: syz.4.2733 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 404.625329][T13017] Tainted: [W]=WARN [ 404.625398][T13017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 404.625413][T13017] Call Trace: [ 404.625421][T13017] [ 404.625431][T13017] __dump_stack+0x1d/0x30 [ 404.625462][T13017] dump_stack_lvl+0x95/0xd0 [ 404.625489][T13017] dump_stack+0x15/0x1b [ 404.625510][T13017] should_fail_ex+0x259/0x270 [ 404.625560][T13017] should_failslab+0x8c/0xb0 [ 404.625597][T13017] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 404.625710][T13017] ? __d_alloc+0x34/0x320 [ 404.625817][T13017] ? __d_alloc+0x34/0x320 [ 404.625846][T13017] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 404.625879][T13017] __d_alloc+0x34/0x320 [ 404.625908][T13017] ? d_alloc_pseudo+0x13/0x80 [ 404.626004][T13017] d_alloc_pseudo+0x1e/0x80 [ 404.626102][T13017] alloc_path_pseudo+0xa4/0x140 [ 404.626132][T13017] alloc_file_pseudo+0x55/0x120 [ 404.626257][T13017] anon_inode_getfd+0xc1/0x190 [ 404.626285][T13017] do_inotify_init+0x21d/0x280 [ 404.626321][T13017] __ia32_sys_inotify_init+0x10/0x20 [ 404.626422][T13017] x64_sys_call+0x1ef9/0x2550 [ 404.626521][T13017] do_syscall_64+0x112/0x360 [ 404.626625][T13017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.626670][T13017] RIP: 0033:0x7f15db35fb19 [ 404.626689][T13017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.626711][T13017] RSP: 002b:00007f15d9daf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 404.626735][T13017] RAX: ffffffffffffffda RBX: 00007f15db5e5fa0 RCX: 00007f15db35fb19 [ 404.626752][T13017] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 404.626766][T13017] RBP: 00007f15db5e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 404.626842][T13017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.626856][T13017] R13: 00007f15db5e6038 R14: 00007f15db5e5fa0 R15: 00007fffa0dd1458 [ 404.626878][T13017] [ 405.025797][T13001] loop3: detected capacity change from 0 to 4096 [ 405.209307][T13001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.244507][ T29] audit: type=1400 audit(1793740698.632:1324): avc: denied { write } for pid=12997 comm="syz.3.2725" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 405.286993][T13001] EXT4-fs error (device loop3): ext4_do_update_inode:6707: inode #15: comm syz.3.2725: corrupted inode contents [ 405.290245][T13001] EXT4-fs error (device loop3): ext4_dirty_inode:7679: inode #15: comm syz.3.2725: mark_inode_dirty error [ 405.290974][T13001] EXT4-fs error (device loop3): ext4_do_update_inode:6707: inode #15: comm syz.3.2725: corrupted inode contents [ 405.292387][T13001] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.2725: mark_inode_dirty error [ 405.296776][T13001] EXT4-fs error (device loop3): ext4_do_update_inode:6707: inode #15: comm syz.3.2725: corrupted inode contents [ 405.298472][T13001] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.2725: mark_inode_dirty error [ 405.299356][ T29] audit: type=1400 audit(1793740698.682:1325): avc: denied { write } for pid=12997 comm="syz.3.2725" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 405.299901][T13001] EXT4-fs error (device loop3): ext4_do_update_inode:6707: inode #15: comm syz.3.2725: corrupted inode contents [ 405.303353][T13001] EXT4-fs error (device loop3): ext4_truncate:5538: inode #15: comm syz.3.2725: mark_inode_dirty error [ 405.304388][T13001] EXT4-fs error (device loop3) in ext4_setattr:7187: Corrupt filesystem [ 405.305276][ T29] audit: type=1400 audit(1793740698.692:1326): avc: denied { write } for pid=12997 comm="syz.3.2725" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 405.305424][ T29] audit: type=1400 audit(1793740698.692:1327): avc: denied { write } for pid=12997 comm="syz.3.2725" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 405.306441][T13035] EXT4-fs error (device loop3): ext4_do_update_inode:6707: inode #15: comm syz.3.2725: corrupted inode contents [ 405.387445][T13019] loop0: detected capacity change from 0 to 4096 [ 405.408373][T12510] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 405.408544][T12510] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 405.408754][T12510] EXT4-fs warning (device loop3): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 405.410360][T12510] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.437331][T13019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.482343][ T29] audit: type=1400 audit(1793740698.862:1328): avc: denied { write } for pid=13018 comm="syz.0.2734" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 405.491208][T13019] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #15: comm syz.0.2734: corrupted inode contents [ 405.491655][T13019] EXT4-fs error (device loop0): ext4_dirty_inode:7679: inode #15: comm syz.0.2734: mark_inode_dirty error [ 405.492353][T13019] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #15: comm syz.0.2734: corrupted inode contents [ 405.500042][T13019] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.2734: mark_inode_dirty error [ 405.501126][T13019] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #15: comm syz.0.2734: corrupted inode contents [ 405.502350][T13019] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.2734: mark_inode_dirty error [ 405.503989][T13019] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #15: comm syz.0.2734: corrupted inode contents [ 405.504465][T13019] EXT4-fs error (device loop0): ext4_truncate:5538: inode #15: comm syz.0.2734: mark_inode_dirty error [ 405.504945][T13019] EXT4-fs error (device loop0) in ext4_setattr:7187: Corrupt filesystem [ 405.507425][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2743'. [ 405.507485][T13042] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2743'. [ 405.521486][T13019] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #15: comm syz.0.2734: corrupted inode contents [ 405.529372][T13019] tunl0: Caught tx_queue_len zero misconfig [ 405.588269][ T3300] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 405.588416][ T3300] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 405.601082][ T3300] EXT4-fs warning (device loop0): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 405.643733][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.374142][T13052] FAULT_INJECTION: forcing a failure. [ 406.374142][T13052] name failslab, interval 1, probability 0, space 0, times 0 [ 406.374256][T13052] CPU: 0 UID: 0 PID: 13052 Comm: syz.4.2746 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 406.374289][T13052] Tainted: [W]=WARN [ 406.374296][T13052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 406.374332][T13052] Call Trace: [ 406.374341][T13052] [ 406.374351][T13052] __dump_stack+0x1d/0x30 [ 406.374379][T13052] dump_stack_lvl+0x95/0xd0 [ 406.374444][T13052] dump_stack+0x15/0x1b [ 406.374469][T13052] should_fail_ex+0x259/0x270 [ 406.374505][T13052] should_failslab+0x8c/0xb0 [ 406.374634][T13052] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 406.374674][T13052] ? __account_obj_stock+0x27f/0x2d0 [ 406.374756][T13052] ? __d_alloc+0x34/0x320 [ 406.374922][T13052] ? __d_alloc+0x34/0x320 [ 406.374954][T13052] ? __account_obj_stock+0x27f/0x2d0 [ 406.374982][T13052] __d_alloc+0x34/0x320 [ 406.375007][T13052] ? d_alloc_pseudo+0x13/0x80 [ 406.375060][T13052] d_alloc_pseudo+0x1e/0x80 [ 406.375189][T13052] alloc_path_pseudo+0xa4/0x140 [ 406.375223][T13052] alloc_file_pseudo+0x55/0x120 [ 406.375255][T13052] anon_inode_getfd+0xc1/0x190 [ 406.375342][T13052] do_inotify_init+0x21d/0x280 [ 406.375378][T13052] __ia32_sys_inotify_init+0x10/0x20 [ 406.375409][T13052] x64_sys_call+0x1ef9/0x2550 [ 406.375477][T13052] do_syscall_64+0x112/0x360 [ 406.375578][T13052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.375600][T13052] RIP: 0033:0x7f15db35fb19 [ 406.375620][T13052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.375649][T13052] RSP: 002b:00007f15d9daf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 406.375671][T13052] RAX: ffffffffffffffda RBX: 00007f15db5e5fa0 RCX: 00007f15db35fb19 [ 406.375765][T13052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 406.375781][T13052] RBP: 00007f15db5e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 406.375797][T13052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.375862][T13052] R13: 00007f15db5e6038 R14: 00007f15db5e5fa0 R15: 00007fffa0dd1458 [ 406.375885][T13052] [ 406.928053][T13081] 8021q: adding VLAN 0 to HW filter on device eth0 [ 406.939828][T13081] 8021q: adding VLAN 0 to HW filter on device eth1 [ 406.969681][T13081] 8021q: adding VLAN 0 to HW filter on device eth2 [ 406.982253][T13081] 8021q: adding VLAN 0 to HW filter on device eth3 [ 407.012781][T12434] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 407.012872][T12434] bond2: (slave veth3): making interface the new active one [ 407.013500][T12434] bond2: active interface up! [ 407.494496][T13074] loop0: detected capacity change from 0 to 4096 [ 407.576080][T13074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.597112][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 407.597166][ T29] audit: type=1400 audit(1793740700.972:1332): avc: denied { write } for pid=13072 comm="syz.0.2754" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 407.598417][T13074] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #15: comm syz.0.2754: corrupted inode contents [ 407.599001][T13074] EXT4-fs error (device loop0): ext4_dirty_inode:7679: inode #15: comm syz.0.2754: mark_inode_dirty error [ 407.599762][T13074] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #15: comm syz.0.2754: corrupted inode contents [ 407.600155][T13074] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.2754: mark_inode_dirty error [ 407.601078][T13074] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #15: comm syz.0.2754: corrupted inode contents [ 407.601993][T13074] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.2754: mark_inode_dirty error [ 407.604354][T13074] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #15: comm syz.0.2754: corrupted inode contents [ 407.605836][T13074] EXT4-fs error (device loop0): ext4_truncate:5538: inode #15: comm syz.0.2754: mark_inode_dirty error [ 407.606477][T13074] EXT4-fs error (device loop0) in ext4_setattr:7187: Corrupt filesystem [ 407.618312][T13074] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #15: comm syz.0.2754: corrupted inode contents [ 407.630951][ T29] audit: type=1400 audit(1793740700.992:1333): avc: denied { write } for pid=13072 comm="syz.0.2754" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 407.630990][ T29] audit: type=1400 audit(1793740700.992:1334): avc: denied { write } for pid=13072 comm="syz.0.2754" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 407.631019][ T29] audit: type=1400 audit(1793740700.992:1335): avc: denied { write } for pid=13072 comm="syz.0.2754" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 407.644385][ T3300] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 407.655122][ T3300] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 407.655385][ T3300] EXT4-fs warning (device loop0): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 407.658754][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.854699][T13061] loop5: detected capacity change from 0 to 8192 [ 407.871609][T13061] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 407.920738][T13102] can0: slcan on ttyS3. [ 407.975690][T13102] can0 (unregistered): slcan off ttyS3. [ 408.344676][T13120] FAULT_INJECTION: forcing a failure. [ 408.344676][T13120] name fail_futex, interval 1, probability 0, space 0, times 0 [ 408.346075][T13120] CPU: 1 UID: 0 PID: 13120 Comm: syz.3.2765 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 408.346113][T13120] Tainted: [W]=WARN [ 408.346121][T13120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 408.346137][T13120] Call Trace: [ 408.346146][T13120] [ 408.346155][T13120] __dump_stack+0x1d/0x30 [ 408.346205][T13120] dump_stack_lvl+0x95/0xd0 [ 408.346232][T13120] dump_stack+0x15/0x1b [ 408.346258][T13120] should_fail_ex+0x259/0x270 [ 408.346367][T13120] should_fail+0xb/0x20 [ 408.346395][T13120] get_futex_key+0x87e/0xc40 [ 408.346432][T13120] futex_wake+0x89/0x400 [ 408.346459][T13120] ? exit_robust_list+0x22/0x220 [ 408.346484][T13120] do_futex+0x3f8/0x460 [ 408.346511][T13120] mm_exit_exec_release+0xab/0x190 [ 408.346618][T13120] exit_mm+0x37/0x1b0 [ 408.346652][T13120] do_exit+0x437/0x14f0 [ 408.346685][T13120] do_group_exit+0xfe/0x140 [ 408.346764][T13120] ? get_signal+0xe03/0xf10 [ 408.346789][T13120] get_signal+0xe0a/0xf10 [ 408.346814][T13120] arch_do_signal_or_restart+0x96/0x480 [ 408.346888][T13120] exit_to_user_mode_loop+0x15d/0x8c0 [ 408.346924][T13120] do_syscall_64+0x212/0x360 [ 408.346967][T13120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.347072][T13120] RIP: 0033:0x7f41668bfb19 [ 408.347088][T13120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.347106][T13120] RSP: 002b:00007f41652ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 408.347128][T13120] RAX: fffffffffffffe00 RBX: 00007f4166b46098 RCX: 00007f41668bfb19 [ 408.347145][T13120] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4166b46098 [ 408.347183][T13120] RBP: 00007f4166b46090 R08: 0000000000000000 R09: 0000000000000000 [ 408.347199][T13120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.347214][T13120] R13: 00007f4166b46128 R14: 00007ffc04932a90 R15: 00007ffc04932b78 [ 408.347236][T13120] [ 408.746013][T13126] can0: slcan on ttyS3. [ 408.788497][T13129] loop5: detected capacity change from 0 to 128 [ 408.839036][T13129] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 408.870659][T13129] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 408.876381][T13129] ext2 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.981034][ T29] audit: type=1400 audit(1793740702.362:1336): avc: denied { write } for pid=13137 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.012979][T13124] can0 (unregistered): slcan off ttyS3. [ 409.035960][ T29] audit: type=1400 audit(1793740702.422:1337): avc: denied { write } for pid=13149 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.146102][ T29] audit: type=1400 audit(1793740702.532:1338): avc: denied { write } for pid=13154 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.196668][ T29] audit: type=1400 audit(1793740702.582:1339): avc: denied { write } for pid=13168 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.420896][ T8759] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 411.310260][T13195] loop3: detected capacity change from 0 to 4096 [ 413.279220][T13195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.306539][T12510] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.963897][T12434] ================================================================== [ 413.963942][T12434] BUG: KCSAN: data-race in n_tty_lookahead_flow_ctrl / tty_set_termios [ 413.963995][T12434] [ 413.964003][T12434] write to 0xffff888119ff2ce0 of 44 bytes by task 13226 on cpu 0: [ 413.964023][T12434] tty_set_termios+0xc0/0x900 [ 413.964058][T12434] set_termios+0x4a7/0x520 [ 413.964092][T12434] tty_mode_ioctl+0x37f/0x5b0 [ 413.964127][T12434] n_tty_ioctl_helper+0x87/0x370 [ 413.964165][T12434] n_tty_ioctl+0x101/0x200 [ 413.964194][T12434] tty_ioctl+0x843/0xbc0 [ 413.964217][T12434] __se_sys_ioctl+0xce/0x140 [ 413.964252][T12434] __x64_sys_ioctl+0x43/0x50 [ 413.964287][T12434] x64_sys_call+0x239d/0x2550 [ 413.964318][T12434] do_syscall_64+0x112/0x360 [ 413.964353][T12434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.964377][T12434] [ 413.964384][T12434] read to 0xffff888119ff2cf9 of 1 bytes by task 12434 on cpu 1: [ 413.964403][T12434] n_tty_lookahead_flow_ctrl+0x12b/0x2d0 [ 413.964437][T12434] tty_port_default_lookahead_buf+0x91/0xc0 [ 413.964467][T12434] flush_to_ldisc+0x279/0x320 [ 413.964493][T12434] process_scheduled_works+0x53f/0xa20 [ 413.964519][T12434] worker_thread+0x56c/0x770 [ 413.964543][T12434] kthread+0x223/0x270 [ 413.964570][T12434] ret_from_fork+0x146/0x330 [ 413.964605][T12434] ret_from_fork_asm+0x1a/0x30 [ 413.964631][T12434] [ 413.964634][T12434] value changed: 0x11 -> 0x53 [ 413.964646][T12434] [ 413.964651][T12434] Reported by Kernel Concurrency Sanitizer on: [ 413.964667][T12434] CPU: 1 UID: 0 PID: 12434 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 413.964703][T12434] Tainted: [W]=WARN [ 413.964712][T12434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 413.964734][T12434] Workqueue: events_unbound flush_to_ldisc [ 413.964759][T12434] ================================================================== [ 413.998491][T13210] loop4: detected capacity change from 0 to 4096 [ 414.085714][T13210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.096830][ T29] audit: type=1400 audit(1793740707.482:1340): avc: denied { write } for pid=13209 comm="syz.4.2789" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.139029][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.472593][ C1] ip6_tunnel: K xmit: Local address not yet configured!