last executing test programs: 7m24.862026542s ago: executing program 32 (id=191): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000003540)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000003580)={0xa, 0x4e20, 0xfffffff7, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000035c0), 0x400000000000284, 0x2, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x180, 0x0, 0x0) 7m6.797900023s ago: executing program 33 (id=412): syz_clone(0x48000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)="bcd8895c") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000880)={0x49db, 0x0, 0xfff9, 0xbfff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000008c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000900)={0x0, 0xffffef7b, 0xfffffffa, 0xb2, 0x9, "1beb00000e001000000008010100"}) r1 = syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000940)=0x44) 6m51.788475049s ago: executing program 34 (id=621): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='27', 0x2) r1 = syz_open_dev$sg(&(0x7f0000000300), 0x0, 0x20c02) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) 6m43.615688631s ago: executing program 35 (id=713): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1, &(0x7f0000000580)) 6m31.59520295s ago: executing program 36 (id=859): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r0 = io_uring_setup(0x3a61, &(0x7f0000000580)={0x0, 0x8270, 0x40, 0x3, 0x846}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 6m10.446584789s ago: executing program 37 (id=1121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) 5m55.319448977s ago: executing program 38 (id=1397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x90, 0x2c, 0xd27, 0x78bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x4000004, 0x20000001, 0x4, 0x2}, 0x1, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf2}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4040050}, 0x0) 5m43.718094532s ago: executing program 39 (id=1568): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x2007651, @empty, 0x200}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) 5m42.692914358s ago: executing program 40 (id=1584): mkdirat(0xffffffffffffff9c, &(0x7f0000001700)='./proc\x00', 0x4) mount(0x0, &(0x7f0000001740)='./proc\x00', &(0x7f0000001780)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000017c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000001800)='10', 0x2) r1 = syz_create_resource$futex(&(0x7f0000001840)) r2 = syz_create_resource$futex(0x0) futex(r1, 0x8, 0x0, 0x0, r2, 0x1) 5m40.020582314s ago: executing program 41 (id=1612): mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./proc/thread-self/fail-nth\x00', 0x2, 0xc9) write(r0, &(0x7f0000000980)='27', 0x2) mknod(&(0x7f0000000840)='./file0\x00', 0x8001420, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="e1", 0x5603d}], 0x1) 5m31.809525839s ago: executing program 42 (id=1719): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0], 0x1, 0x3a4, &(0x7f00000005c0)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=@delneigh={0x28, 0x1d, 0x1, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, [@NDA_DST_MAC={0xa, 0x1, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0xc044091}, 0x80c0) 5m17.234984821s ago: executing program 43 (id=1938): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x22, 0x0, 0x3, 0x4, 0x0, 0x9, 0xa16af, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x8084, 0xa2, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000200)='X', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r1, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@deltaction={0x14, 0x2a, 0x101}, 0x14}}, 0x48044) 5m15.462847413s ago: executing program 44 (id=1952): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf93", 0x38}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5m14.508919392s ago: executing program 45 (id=1964): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000a40)="$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") rename(&(0x7f00000015c0)='./file2\x00', &(0x7f0000001600)='./file1\x00') 4m57.785061565s ago: executing program 46 (id=2100): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x810, &(0x7f0000000800)={[{@errors_remount}, {@bsdgroups}]}, 0x8, 0x4fe, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f00000003c0)=""/141, &(0x7f0000000480)=0x8d) 4m29.003416861s ago: executing program 47 (id=2412): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 4m21.352352249s ago: executing program 48 (id=2512): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x5) accept(r0, &(0x7f00000001c0)=@pptp, 0x0) file_setattr(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x3922, 0x1, 0x7, 0xffffffff, 0x9}, 0x18, 0x1000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e22, @local}, 0x10) 4m20.263131831s ago: executing program 49 (id=2532): setuid(0xee01) r0 = shmget$private(0x0, 0xa000, 0x54000000, &(0x7f0000ff4000/0xa000)=nil) r1 = syz_create_resource$futex(&(0x7f0000000940)=0x1) r2 = syz_create_resource$futex(&(0x7f0000000980)) futex(r1, 0xb, 0x1, 0x0, r2, 0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee01, 0x0, 0x1, 0x7}, 0x7, 0x0, 0x9, 0x9a0, 0x0, 0x0, 0x5}) shmctl$IPC_RMID(r0, 0x0) 4m6.759725502s ago: executing program 50 (id=2726): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtaction={0x14, 0x30, 0x100, 0x0, 0x3, {0x9}}, 0x14}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 4m2.435972568s ago: executing program 51 (id=2777): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xb, &(0x7f0000000400)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000200)=0x4, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000240)="b3019c28", 0x4, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 3m57.148690193s ago: executing program 52 (id=2828): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f00000008c0)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000000900)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f00000009c0)=[{{&(0x7f0000000a00)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000b00)=""/144}, {&(0x7f0000000bc0)=""/240}, {&(0x7f0000000cc0)=""/86, 0xfffffffffffffdb2}, {&(0x7f0000000d40)=""/253}, {&(0x7f0000000e40)=""/208}]}, 0x3422a61a}], 0x4000209, 0x10102, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x3031, 0x0, &(0x7f0000001080), &(0x7f00000010c0), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 3m49.172244114s ago: executing program 53 (id=2878): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x9) lseek(r2, 0x1, 0x0) getdents64(r2, 0x0, 0x22) 3m43.539126344s ago: executing program 54 (id=2812): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000180)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f000001a380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x10800, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f000001a400)=@filter={'filter\x00', 0x4, 0x4, 0xb78, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0xaa8, 0xaa8, 0xaa8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0x0, 0xff, 0xff], [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {}, 0x87, 0x0, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x800007}}}}, {{@uncond, 0x0, 0x8b0, 0x8f0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x0, 0x3}, {0xf}, {0x4, 0x1}, {0x6315}, {0x5, 0x3}, {0x800, 0x1}, {0x7fffffff, 0x1}, {0x5, 0x1}, {0x401, 0x2}, {0x9}, {0x2bde40, 0x1}], [{0x1ff, 0x5}, {0x8, 0x2}, {0x1, 0x7}, {0x9, 0x4}, {0x3, 0x7}, {0x9, 0x3}, {0xfffffff9, 0xd7aa}, {0xd, 0x1}, {0x0, 0x1}, {0x4, 0x431e}, {0x8, 0x398}], 0x4, 0x4}, {[{0x8, 0x3ae289534ee0f438}, {0x992, 0x1}, {0x27, 0x2}, {0x7fffffff, 0x2}, {0x41, 0xb4f7847981607277}, {0x3, 0x2}, {0xe9c, 0x2}, {}, {0xa92, 0x2}, {0x7, 0x1}, {0x9}], [{0x3, 0x5}, {0x6, 0x6}, {0x5, 0x3}, {0x8000, 0x1}, {0x6, 0x3}, {0xe, 0x1}, {0x1, 0x1}, {0x8001, 0x8}, {0x80ff, 0xb}, {0x17d, 0xffffffff}, {0x10, 0x8}], 0x1, 0x6}, {[{0x10001, 0x3}, {0xff, 0x2}, {0x5, 0x1}, {0x8000, 0x2}, {0x3ff, 0x3}, {0x81}, {0x7, 0x3}, {0x7bf, 0x3}, {0x8, 0x1}, {0x5, 0x3}, {0x2e1, 0x1}], [{0xd9, 0xffffffa9}, {0x2, 0x2}, {0x9, 0x5}, {0x0, 0x7a6}, {0x2, 0x4}, {0x10000, 0x1}, {0x6, 0x7ad1}, {0x7f, 0x1}, {0xf, 0x5}, {0x9, 0x2}, {0x0, 0x9}], 0x8, 0x4}, {[{0xffffffff, 0x3}, {0xffff, 0x3}, {0x6}, {}, {0x4, 0x2}, {0xa6, 0x1}, {0x9, 0x1}, {0x8, 0x1}, {0x6}, {0x1000, 0x3}, {0x4, 0x2}], [{0x800, 0x3ff}, {0x5, 0x357}, {0x10000, 0x4}, {0x200006d, 0x9000}, {0x7, 0x3ff}, {0x6, 0x8000}, {0x100, 0x1}, {0x4}, {0xb, 0x95}, {0x7, 0xfffffffb}, {0x7, 0x2}], 0x4, 0x8}, {[{0x5, 0x1}, {0x6}, {0xff, 0x3}, {0x8000, 0x3}, {0x40002, 0x1}, {0x95, 0x2}, {0x8, 0x3}, {0xfffffffd}, {0x5, 0x2}, {0x2, 0x1}, {0x4, 0x2}], [{0x40, 0x18}, {0x221, 0xff}, {0x6, 0x800}, {0x8, 0x10001}, {0x100, 0x58}, {0x8e, 0x8e}, {0x5, 0x8001}, {0x0, 0x1}, {0xe0b, 0x2}, {0x1, 0x3}, {0x8, 0x7}], 0xa, 0x5}, {[{0x4}, {0x7, 0x2}, {0x401, 0x1}, {0x280000, 0x2}, {0x0, 0x3}, {0x9, 0x3}, {0x6910, 0x2}, {0x104, 0x1}, {0xa8, 0x2}, {0xe, 0x2}, {0x7, 0x2}], [{0xa, 0x7}, {0x5, 0x5}, {0x6, 0x30000000}, {0x9, 0x1}, {0x1, 0x4}, {0x80, 0x9}, {0xbf2, 0x400003}, {0x100}, {0x9, 0x7fff}, {0x7, 0x4}, {0x2, 0x9}], 0x5, 0x9}, {[{0x6, 0x3}, {0xff, 0x1}, {0xad6d}, {0x3ff, 0x3}, {0x7fff, 0x3}, {0x2d}, {0x5, 0x1}, {0x10001}, {0x5d7, 0x3}, {0x6, 0x2}, {0x5}], [{0x2, 0x101}, {0xcf8b, 0x1}, {0x8, 0x6}, {0x2, 0x5}, {0xd51, 0x5}, {0xfffff3bc}, {0x6, 0x8001}, {0x7, 0x8}, {0x2}, {0x3, 0x9}, {0x2, 0x4000000}], 0x1, 0x9}, {[{0x7}, {0xbe6, 0x3}, {0x1, 0x1}, {0xeb, 0x3}, {0x2}, {0xb, 0x3}, {0xa, 0x3}, {0x2000}, {0xfffffffe}, {0x95, 0x1}, {0xa}], [{0x8000, 0x7f}, {0x7, 0x4}, {0x100, 0x2d}, {0x9, 0x2}, {0x80000000, 0x9}, {0xe3e, 0x10000}, {0x600, 0x1}, {0x2, 0x4}, {0x7ff, 0x9}, {0x8}, {0xffff2a8d, 0x95}], 0x1, 0x5}, {[{0x0, 0x1}, {}, {0x4, 0x1}, {0x6, 0x1}, {0x6, 0x1}, {0xf92, 0x3}, {0x3, 0x2}, {0x5, 0x1}, {0xfffffc00, 0x3}, {0x3, 0x3}, {0x10001, 0x2}], [{0xfffffffa, 0x9}, {0x2, 0x4}, {0x6c22, 0x9}, {0x9, 0x4}, {0x4, 0x9}, {0x9}, {0x2}, {0x1a4e567, 0xc2df}, {0x1, 0x7}, {0x10, 0x3b1e}, {0x3, 0xf}], 0x3, 0x2}, {[{0x7f, 0x1}, {0xcd2}, {0x1}, {0xe, 0x1}, {0x7, 0x82007afa20b1bc8a}, {0x3bc1000, 0x1}, {0x10000, 0x3}, {0xfffffffd, 0x2}, {0x80000001, 0x1}, {0xb6f4, 0x3}, {0x8}], [{0x0, 0xfffffff9}, {0x2, 0xc}, {0x8, 0x3}, {0x7ff, 0x3}, {0xd3, 0x7}, {0x1, 0x3}, {0x7, 0x738c}, {0x6, 0xedba}, {0x6, 0x1}, {0x1, 0x8001}, {0x8, 0x2}], 0x3, 0x8}, {[{0x3, 0x2}, {0x2, 0x1}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x4}, {0xa7e, 0x1}, {0x3, 0x2}, {0x1, 0x1}, {0x5}, {0x4, 0x1}], [{0x1, 0x80000000}, {0x100006, 0x8001}, {0x9, 0x5}, {0xa, 0x8}, {0x7, 0x80}, {0x1a, 0x4}, {0x4}, {0x5, 0x2}, {0x5d, 0x7ff}, {0x1e3, 0x3}, {0xffffff16, 0x2}], 0x0, 0x3}], 0x8, 0x1}}, @common=@hl={{0x28}, {0x3, 0x8}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xbf0) 3m43.39167456s ago: executing program 55 (id=2918): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000021000)='./proc\x00', &(0x7f0000021040)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000021080)='./proc/thread-self/fail-nth\x00', 0x2, 0xc9) write(r0, &(0x7f00000210c0)='27', 0x2) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000021100)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000021140), 0x2000011a) 3m42.750535136s ago: executing program 56 (id=2924): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8c, 0xe6}, 0x0, 0x80000000, 0x0, 0x2, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x810, &(0x7f0000000800)={[{@errors_remount}, {@bsdgroups}]}, 0x8, 0x4fe, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f00000003c0)=""/141, &(0x7f0000000480)=0x8d) 3m7.010024248s ago: executing program 57 (id=3154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000f7c0)=@newtfilter={0x110, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xe4, 0x2, [@TCA_U32_ACT={0x34, 0x7, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_U32_SEL={0xa4, 0x5, {0x8, 0xa, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x2}, {0x400, 0x9, 0xe, 0x1}, {0x80000000, 0x80000000, 0x1, 0x7f}, {0x81, 0x1, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0x2}}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 3m2.650267517s ago: executing program 58 (id=3234): unshare(0x480) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x80082) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x3832, 0x4, 0x0, 0x0, 0x8000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040001}, 0x20000840) 2m55.107207925s ago: executing program 59 (id=3312): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000140)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000001c0)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)="bc", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x20040001) 2m51.871837198s ago: executing program 60 (id=3346): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000001d80)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) mount(0x0, &(0x7f0000002d80)='./dev\x00', &(0x7f0000002dc0)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002e00)='./mnt\x00', 0x1ff) mount(&(0x7f0000002e80)=@filename='./dev/sda1\x00', &(0x7f0000002ec0)='./mnt\x00', &(0x7f0000002f00)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000002f40)='./mnt\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./debug\x00', 0x1ff) 2m25.960268118s ago: executing program 61 (id=3465): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x81400e, &(0x7f0000000940)={[{@jqfmt_vfsv0}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@sb={'sb', 0x3d, 0x4}}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nolazytime}, {@errors_remount}, {@nojournal_checksum}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0xfe, 0xbdb, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x42) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000900)=0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x13) prctl$PR_SET_KEEPCAPS(0x8, 0x3) linkat(0xffffffffffffff9c, &(0x7f0000007180)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000071c0)='./file7\x00', 0x1000) 2m21.66715838s ago: executing program 62 (id=3667): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0xa0800, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000900)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000740)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000780)={'syzkaller0\x00', @random="110000000002"}) 2m9.991207173s ago: executing program 63 (id=3823): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000480)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000580), 0x366, 0x10, &(0x7f00000005c0), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 2m9.494178944s ago: executing program 64 (id=3831): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) flock(r1, 0x8) 1m35.097519938s ago: executing program 4 (id=4283): syz_clone(0x20000011, 0x0, 0x0, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0xfffffffffffffefa}, &(0x7f0000000040)={&(0x7f0000000080)}) waitid(0x2, 0x0, 0x0, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m34.49041968s ago: executing program 4 (id=4294): sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000000207b1e851f1ed7a92ac0000020000080c00034000000000000000080900010073797a300000000078ad85ef12d60c7be0d06b34a33367d5bba66dae513a330cd9c01ca5f6982c2867ed38f78aed5ad3052e294dbd3e6bfab480fd0800deb8bdb19ebc67c2ef19c4cda8673ec658c5729d4e3b0104d23a1d06cc"], 0x2c}, 0x1, 0x0, 0x0, 0x20004010}, 0x2004800c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x4, 0x3}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x8, 0x7}, 0x20b0, 0xc, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r0, 0x0) 1m34.237781866s ago: executing program 4 (id=4300): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./bus\x00', 0x14552, &(0x7f0000000280)=ANY=[], 0x7b, 0x1207, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002f80)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000002fc0)=ANY=[], 0x32600) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x44000, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file2\x00', 0x181341, 0x0) fallocate(r1, 0x1, 0x1, 0x2000404) 1m33.184450555s ago: executing program 4 (id=4327): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x1000c40, &(0x7f0000000380), 0x5, 0x51c, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1fb) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='ext4\x00', 0x8410, 0x0) symlink(0x0, 0x0) unlink(0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0x104000, 0x0) 1m33.028247731s ago: executing program 4 (id=4332): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3e, 0x0) 1m32.905983834s ago: executing program 4 (id=4333): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c) pselect6(0x40, &(0x7f0000000580)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f00000005c0)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) shutdown(r0, 0x1) 1m32.905839504s ago: executing program 65 (id=4333): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c) pselect6(0x40, &(0x7f0000000580)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f00000005c0)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) shutdown(r0, 0x1) 38.624256967s ago: executing program 3 (id=4993): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x1000, 0x10000, 0x8, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000740)=""/222, 0x0, 0x8}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x1, 0x0, &(0x7f00000008c0)=0xfffffffffffffed0) 38.3936304s ago: executing program 3 (id=4997): socket$nl_xfrm(0x10, 0x3, 0x6) ptrace(0x10, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000140)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='xprtsec\x00', 0x0, 0x0) syz_emit_ethernet(0x77, 0x0, &(0x7f0000000380)={0x1, 0x400001, [0xa35, 0xeab, 0xa6c, 0x197]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000340)='./file0\x00', 0x204818, &(0x7f0000000500)={[{@map_off}, {@check_strict}, {@overriderock}, {@cruft}, {@check_strict}, {@unhide}, {@map_off}, {@uid}]}, 0xfd, 0x544, &(0x7f0000000bc0)="$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") pread64(r1, &(0x7f0000001140)=""/71, 0x47, 0xffffffff) 38.081073183s ago: executing program 3 (id=5001): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000f40)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000f80)={0x1, &(0x7f0000000fc0)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000001000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x40008) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x8}, 0xc4) syz_genetlink_get_family_id$tipc2(&(0x7f00000011c0), r1) shutdown(r0, 0x1) 38.028949958s ago: executing program 3 (id=5002): socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000c40)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x21081e, &(0x7f0000000cc0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000d00)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000680)=0x8, 0x4) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r1, 0x0, 0x0) 37.899300431s ago: executing program 3 (id=5003): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1fc) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='27', 0x2) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$unix(r0, 0x0, 0x0) r1 = openat$dm_control(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xa4410, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'CRP-syz', 0x0, '0\x00'}}}) 37.62344052s ago: executing program 3 (id=5007): prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) getpid() perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x5, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000100), 0x2000011a) recvmmsg$unix(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x121, 0x0) 37.62320966s ago: executing program 66 (id=5007): prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) getpid() perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x5, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000100), 0x2000011a) recvmmsg$unix(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x121, 0x0) 35.19540021s ago: executing program 0 (id=5033): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r3}, 0xc) 35.176082322s ago: executing program 0 (id=5037): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x202, 0x0) write(r0, &(0x7f0000000100)='27', 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) open(&(0x7f0000000480)='./proc/sys/vm/compaction_proactiveness\x00', 0x10b842, 0x0) 34.875052863s ago: executing program 0 (id=5040): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000000900)='fdinfo/3\x00') pread64(r3, &(0x7f0000000940)=""/35, 0x23, 0xdade) 34.743431167s ago: executing program 0 (id=5041): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x10000d, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000500)) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000100)={0x6f49, 0x1}) 34.572437004s ago: executing program 0 (id=5044): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x20102, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2400c800) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 34.474353344s ago: executing program 0 (id=5046): getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0xf85b, 0x57}, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000640)) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'hsr0\x00'}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80), 0x40141, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000e00)=0x3) 33.840653179s ago: executing program 1 (id=5056): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)="bdc99118158ffb3222a77dce29e913c7fa56753b708da3c283982b260ce5abd73c63ebd0b452b90f91943532f9d9b862c0ea33a403e4296db241fea24984873479c48ab65e8a04715da0a09b9100da082e1ef81b1b2e9c09b2cdf5c8b51d073cb8d0b31622fbdfa82a7f4098302d956b7b9603b9119bd83b0ae863bf29bfb5ff0fdec352e751f2002915b9a97ccb11880df592aa6e77c60a33c8", 0x9a}], 0x1) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/153, 0x99}, {&(0x7f0000000400)=""/4115, 0x1013}], 0x2) 33.802696723s ago: executing program 1 (id=5057): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) ioprio_get$uid(0x3, 0x0) 32.912576795s ago: executing program 1 (id=5064): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)='27', 0x2) openat$dm_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000280)=""/193, 0xc1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e000004"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 32.561344831s ago: executing program 1 (id=5067): close(0x3) ioprio_set$pid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004380)=@deltfilter={0x1cdc, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1cac, 0x2, [@TCA_CGROUP_ACT={0x1ca8, 0x1, [@m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0x1c70, 0x1, 0x0, 0x0, {{0xa}, {0x1c44, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x42, 0x5, 0x8, 0xe, 0x1000}, 0x7, 0x2}, [{0x789, 0x5, 0x6, 0x7e8b, 0x4617, 0x9}, {0x6, 0x1ff, 0x9, 0x4db, 0x80000001, 0x1}, {0x6, 0x5, 0x975a, 0x1, 0x5, 0x2}, {0x20000000, 0x1000, 0x7, 0x5, 0xfffffffe, 0x2}, {0xffffffff, 0xc, 0x4, 0x0, 0xd9d, 0x4}, {0x3ff, 0xc, 0x277, 0x6, 0x9, 0xa1a1}, {0x7, 0x7, 0x6, 0x9c5, 0x9, 0x4}, {0xa43d, 0x9, 0xffffffff, 0xac649e7, 0xb44, 0x3}, {0xfffffffe, 0x2, 0x4e5, 0x0, 0xb64, 0xe451}, {0x1, 0x9, 0x3, 0x10001, 0x3, 0x6}, {0x8, 0xb2b, 0xffffe4ac, 0x8, 0x3, 0x7fff}, {0x8, 0x3, 0x2, 0x5, 0xfffffffb, 0x5}, {0x7ff, 0x9df, 0x0, 0x2a72, 0x5f, 0x3}, {0x576294ac, 0x9, 0x8000, 0x0, 0x8, 0x4}, {0x400, 0x3, 0x3, 0x1c41711b, 0x1, 0x4}, {0x100, 0x9, 0xffffffd6, 0x466, 0x9, 0xa}, {0x8000, 0xffffffff, 0x10000, 0x3ff, 0x7fffffff, 0x80000001}, {0x8ed9, 0x9, 0x5, 0xcbb, 0x6, 0x8}, {0x4, 0x9, 0x3, 0x8, 0x80000001, 0x79a5}, {0x3, 0x82, 0x1, 0x80000001, 0x800, 0x8000}, {0x3ff, 0x3, 0x8, 0xc, 0x6, 0x401}, {0x4, 0xaa7, 0x1, 0x3, 0x2}, {0x7, 0x8, 0x7, 0x1, 0x80000000, 0x46a}, {0x99f6, 0xa1ad, 0xfffffff8, 0x5, 0x1000, 0x1}, {0x6, 0x6, 0x2, 0x80, 0x8, 0x3}, {0xffff16c6, 0x17, 0x4, 0x4, 0xe000, 0x3}, {0x7, 0x1, 0x5, 0x2, 0x80, 0x8001}, {0x8, 0xfffffffe, 0x6, 0xfffffffc, 0x7, 0x6}, {0x6, 0x8, 0x5, 0x9, 0x2, 0x4}, {0x101, 0x2, 0x1, 0xffff, 0x0, 0x9}, {0x2, 0xe2, 0x6, 0x800, 0xdd, 0x56a}, {0x9, 0xa62, 0x1, 0x7fffffff, 0x3, 0x8}, {0x5, 0x0, 0x7ff, 0x9, 0x9, 0x6}, {0x1ff, 0x0, 0x7, 0x2, 0x2, 0x100}, {0x5, 0x9, 0x7, 0x40, 0xa5, 0x9}, {0x3, 0xfa68e37, 0xffffffff, 0x3, 0x3, 0x1}, {0x9, 0x7, 0x6, 0xff, 0xd, 0x8}, {0x7ea60633, 0x7, 0x5, 0x6, 0x1, 0x9}, {0x2, 0x8001, 0x561a, 0x8, 0x200, 0x5}, {0x2, 0xaef, 0x938f, 0x4, 0x6, 0x7}, {0x6, 0x5, 0x7, 0x400, 0x10, 0x4}, {0x7f, 0x5, 0x9, 0xe, 0x0, 0x3}, {0x7, 0x7, 0x2a, 0x7fff, 0x7, 0x8}, {0x2, 0x2, 0x80, 0x5, 0x9, 0x8}, {0x5, 0x9, 0x3, 0xfffffffc, 0x93, 0x8000}, {0x2, 0xfff, 0xffffbab6, 0x8, 0x800, 0x8001}, {0xe, 0x1, 0x7fffffff, 0x0, 0x3, 0x401}, {0x6, 0x2, 0x4, 0x7, 0x4c, 0x8}, {0x8, 0x3, 0x5, 0x9, 0x9, 0xf}, {0x8, 0x1ff, 0x3ff, 0x9a82, 0x10000, 0xbfd3}, {0x2, 0x6, 0x7, 0xeed8, 0x7}, {0x80, 0x3, 0x9, 0xfffffffe, 0x6, 0x7}, {0x5, 0x2, 0xa02, 0x4, 0x9, 0xc07}, {0xfffffff1, 0x2b1e, 0x50, 0xfff, 0x2, 0x6}, {0xc, 0x40, 0x3, 0x8001, 0x8001, 0xc}, {0x6, 0x2, 0x9, 0x7, 0x9, 0x7}, {0xff, 0xc59, 0x8001, 0x1, 0x3fa4, 0x1}, {0x3, 0xfff, 0x7a9, 0x4, 0xfffffff9, 0x3}, {0x8, 0x2, 0x5, 0x40, 0x7fff, 0x80}, {0xa00, 0x7, 0xb98d822, 0xba, 0xd8, 0x3}, {0xc6bb, 0x1, 0x7, 0xf, 0x7f, 0x7}, {0x73e2, 0x7ff, 0x2, 0x101, 0x7fffffff, 0x8}, {0x8ee, 0x3, 0x1, 0x2, 0xa4ad, 0x7fffffff}, {0x3, 0x8, 0x6, 0x41b23dc6, 0x7, 0xfffffffa}, {0x6, 0x8, 0x5, 0x13, 0x4, 0x2}, {0x4, 0x2, 0x3, 0x2, 0x9, 0xfffffff9}, {0x1000, 0x1ce00000, 0x0, 0x8, 0x5, 0x1}, {0x6, 0x4, 0x2, 0x2195e754, 0x7, 0x1}, {0x8, 0xfff, 0x4, 0x7fffffff, 0x9, 0xfb}, {0x800, 0x6, 0x8, 0xffff, 0x80, 0xd757}, {0x401, 0x692a, 0x9, 0x9, 0xf07, 0x9}, {0x1, 0x2, 0x80000001, 0x8, 0x9, 0x6501}, {0x5, 0x6, 0xb2bb, 0x6, 0xfffffff2, 0x8}, {0x6, 0x7fff, 0x100, 0x8000, 0x789, 0x3}, {0x200, 0x5, 0x3, 0x0, 0x0, 0x4}, {0xd, 0x3, 0x7, 0x1, 0x21c4, 0xe0}, {0xb, 0x5, 0x8, 0x4000, 0x80000000, 0x4}, {0xbc6, 0x6, 0x5, 0x1, 0x10001, 0x1000}, {0x19409ba7, 0x325d, 0x8, 0x3, 0x80000001, 0x1}, {0x9, 0x4, 0x9, 0x7fffffff, 0x81, 0x1675d6a8}, {0x6, 0x5, 0x9, 0x1, 0x180, 0x4}, {0xeec, 0x8, 0x200, 0x8, 0x0, 0x2}, {0x1, 0x6, 0xfffffff9, 0x7, 0x1, 0x1}, {0xc000000, 0x1, 0xf, 0x2, 0x1ed8c651, 0x8}, {0xff, 0x4, 0x8, 0x5, 0xc, 0x7}, {0x8, 0x0, 0x3, 0x534, 0x0, 0x7}, {0x3, 0x3, 0x8, 0x4, 0x9, 0xff}, {0x6, 0x400, 0x40, 0x3, 0x6ccc, 0x4}, {0x229, 0x2, 0xfb13, 0xfffffffc, 0xef3b, 0xa7}, {0x2, 0x3, 0x7, 0x8, 0x7, 0x8000}, {0x2b, 0x7ff, 0x80000001, 0xc, 0x3, 0xfffffffd}, {0x0, 0x155, 0x3, 0x6, 0x3, 0x1}, {0xfffffff7, 0x5, 0xb0f, 0x3, 0x8, 0x3}, {0x8, 0xa4c5bd, 0x200, 0x2, 0x117, 0x5}, {0x5, 0x1000, 0xe, 0x2, 0xd2, 0x6}, {0x81, 0x2, 0x8, 0x0, 0xffffffff, 0xffff6a89}, {0x2, 0x100, 0x0, 0x89e, 0x3b8, 0xd}, {0x101, 0x1, 0x0, 0x0, 0x3, 0x4}, {0xe51ba739, 0x0, 0x1, 0x800, 0x4, 0x1}, {0x0, 0x3, 0xf52d, 0x9, 0x8, 0x101}, {0xbd, 0x1, 0x0, 0x5, 0x10000, 0xf}, {0x2, 0x3, 0x100, 0xfffff8ec, 0x2}, {0x8b9a, 0x80, 0x400, 0x2, 0x3, 0x2}, {0x7ff, 0x100, 0x28c9, 0x0, 0x0, 0x1ff}, {0xffffffff, 0x7, 0xfffff75b, 0x42d, 0x4b20, 0x3}, {0x1, 0x7fff, 0x10, 0x5, 0x7fffffff, 0x100}, {0x101, 0x800000, 0x9, 0xa, 0x1, 0x7122bc46}, {0x4, 0x3ff, 0xfff, 0x965, 0x9}, {0x1, 0xfffffffa, 0x4d9, 0x7, 0x2, 0x5}, {0xf0a, 0xbc, 0x3, 0x9, 0x9, 0x81}, {0x4, 0x2, 0x7, 0x7, 0xd2, 0x4}, {0x1, 0x10, 0x5, 0xff, 0x7f}, {0x6a56, 0x7, 0x5ded, 0x3, 0x9, 0x101}, {0x7, 0x0, 0x0, 0x1a0a000, 0x9, 0xfffffffd}, {0x27d, 0x6, 0x81, 0x5, 0x96, 0xb}, {0x4030, 0x4a5, 0x9, 0x4, 0x9, 0x7fffffff}, {0x7, 0xfcd, 0x5, 0xde, 0xfff, 0x4}, {0xfffff2d1, 0x5, 0x3f99e0a3, 0xb, 0xffffffff, 0x6}, {0x8, 0x4, 0x2, 0x19b, 0x488, 0x8}, {0x2, 0x8, 0x3, 0x5, 0x6, 0xbf31}, {0x80, 0x9, 0x80, 0x8, 0x3b400000, 0xb}, {0xc0, 0x5, 0x4, 0x6, 0x3, 0xffff}, {0x8, 0x1, 0x5, 0x3, 0xe64b, 0x8}, {0x20, 0x7, 0x80000000, 0x7, 0xa, 0xb}, {0x1, 0x1, 0x9, 0x2, 0x9}, {0xff, 0x7, 0x8001, 0xd, 0x6d, 0x4f9}, {0x3, 0x400, 0x9, 0x4, 0x100, 0x2}, {0x1, 0x0, 0xd, 0x8000, 0xa0bc, 0x7e91}], [{0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {}, {0x4}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x1}, {0x4}, {0x4}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x3}, {}, {0x6, 0x1}, {}, {0x4}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x3, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0xd, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x2}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x141f4cc097f2fdb}, {0x1, 0x1}, {0x3, 0x5e27899ab34b3207}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x6, 0x1}, {0x4}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7d, 0x1, 0x1, 0x4, 0x200}, 0x3, 0x3}, [{0xfffffff9, 0x10000, 0x6, 0x15800000, 0x6, 0xf8}, {0x10001, 0x97, 0x6, 0x0, 0x7, 0x401}, {0x9, 0x7, 0x101, 0x0, 0x1f43, 0x1}, {0x9, 0x81, 0xfef9, 0x363520e3, 0x1, 0x1}, {0xffffffff, 0x8001, 0xfffffffb, 0x5, 0x9, 0x2}, {0x1, 0x8, 0x81, 0x3, 0x3, 0x80}, {0x5, 0x9, 0x6, 0x3, 0xfffffffa, 0x101}, {0x6, 0x3, 0x3, 0x5bad86b, 0x0, 0x9}, {0x0, 0x1, 0x8, 0x3, 0x5, 0x1}, {0x0, 0x0, 0x7fff, 0x2, 0x47, 0x5}, {0x0, 0x5, 0x2b7e, 0x2, 0x7fffffff, 0xde}, {0x80000001, 0x3, 0x4, 0x9, 0x6, 0x9}, {0x4, 0x0, 0x7, 0x4, 0x6, 0x8001}, {0xb, 0x7ff, 0x7, 0x7, 0x5, 0x4c}, {0x8, 0x10000, 0x4, 0x81, 0xcbd, 0x6}, {0x39, 0x9, 0x9, 0x1, 0x4, 0x400}, {0x5, 0x9, 0xde4, 0x990, 0x3, 0x2}, {0xe, 0x40, 0x1, 0x80000001, 0x5, 0x8}, {0xe, 0x57d, 0x4, 0x7, 0x1, 0xb}, {0x1343, 0x2, 0x4d, 0x3ff, 0x22cb, 0x529e}, {0xe2f6, 0xffff, 0x10001, 0x2, 0x739, 0x94}, {0x0, 0x0, 0x0, 0x20000000, 0x9, 0x501}, {0x3, 0x7, 0x4, 0x6087, 0x8}, {0xab14, 0x6, 0x1, 0x800, 0x6, 0xa891}, {0x8, 0x9, 0x40, 0x3, 0xff, 0x2}, {0x7, 0x0, 0x9, 0x7f, 0x13, 0xab}, {0xfba3, 0x4, 0x7ff, 0x1, 0xdb6000, 0x3}, {0x7, 0x0, 0x8, 0x400, 0x90000000, 0x10001}, {0x1, 0xfffffffc, 0xff, 0x7fffffff, 0xffffffff, 0x7}, {0x5, 0x7, 0x3, 0x47fa5bde, 0x0, 0x1ff}, {0x9000000, 0xfff, 0x1, 0x4, 0x4, 0xfffffffa}, {0x4, 0x400, 0x80000000, 0x4, 0x800, 0xfffffffe}, {0x9, 0x6, 0x100, 0x1, 0x3, 0x4}, {0xa2, 0x5, 0xeeab, 0x6, 0x3ff, 0x9}, {0x3, 0x1, 0x2, 0x3ff, 0x6, 0xffff}, {0x400, 0x7, 0x7, 0x9, 0xc8b3, 0xfffffc00}, {0x2, 0xffffffff, 0x10001, 0x4, 0x8001, 0x3ff}, {0x7fff, 0xfffffffb, 0xfffeffff, 0x4, 0xec, 0x10001}, {0x1, 0x2, 0xa, 0x99, 0x2, 0x3}, {0x2dfa2fd8, 0x5, 0x4, 0xc, 0x6, 0x2}, {0x9, 0x4, 0x2, 0x1, 0x2, 0x5}, {0x10, 0x9, 0x0, 0x2, 0xfffffffc, 0xd6f}, {0xa, 0x10, 0x0, 0x5, 0xe1}, {0xfffff61b, 0x2, 0x40, 0x6, 0x3, 0x6}, {0x9, 0x100, 0x7, 0x6, 0x37, 0x1}, {0x7f, 0xfffffff0, 0xffffffff, 0x1, 0x7, 0x7}, {0xffff8000, 0x4, 0x100, 0x5, 0x8, 0x9}, {0x9, 0x10, 0x6, 0x8000, 0x5, 0xd39d}, {0x7fff, 0x101, 0x8000, 0x6, 0xfffffff8, 0x401}, {0x7, 0x0, 0x7a, 0x2, 0x1, 0x7}, {0x4ff4, 0x4, 0x9, 0x2, 0xe29, 0x80000000}, {0x4, 0x9, 0x3, 0x1, 0xffffffff, 0xe0}, {0x6dd45467, 0x2, 0x4bf, 0x7, 0x4, 0x7}, {0x400, 0x2c01, 0x5, 0x6, 0x2, 0x7}, {0x9, 0x9, 0x8000, 0x4, 0x2, 0x9}, {0x80, 0x1, 0x81, 0x5, 0x2, 0x8}, {0x4, 0x3, 0xfffffffd, 0x15, 0x40, 0x2}, {0x0, 0x2, 0x0, 0x4b3, 0xfffffff9, 0x7}, {0x7, 0x6, 0x8, 0x5, 0x2, 0x9}, {0x3, 0x7fffffff, 0x3, 0x9, 0x2, 0x80000000}, {0x7, 0x1, 0x5, 0x4, 0x2, 0x81}, {0x89f, 0x2, 0x7c4c, 0xfff, 0xfffffff7, 0x8}, {0x9, 0x4, 0x3, 0xd, 0x6, 0x10001}, {0x7, 0x5, 0x4, 0x7, 0xffffffff, 0x6}, {0x9, 0xc, 0x6, 0x5, 0x8, 0x4}, {0x74d, 0x0, 0xffffffff, 0xfff, 0xc0, 0x3}, {0x3, 0x9, 0x9, 0x814a, 0x0, 0x605}, {0x9c, 0x8, 0x6, 0x90, 0x6, 0x5}, {0x7, 0x80, 0x8, 0x4122, 0x0, 0x1}, {0x4, 0x2c9, 0x10, 0xeeb1, 0x1, 0x80000001}, {0x1, 0xb, 0x1, 0xf, 0xfffffff9, 0x6}, {0x7, 0x401, 0x57, 0x2, 0x7fff, 0x2}, {0x346959dc, 0x80, 0x200, 0x9, 0x5, 0x1}, {0x5, 0xfffffff9, 0x2, 0x8, 0x8000, 0x6}, {0xfffffff8, 0x0, 0x0, 0x7, 0x4, 0x4}, {0x4, 0x6, 0xd28, 0x7, 0x0, 0x559}, {0x9, 0x7f, 0x2c15, 0x7fff, 0x7, 0xe}, {0x2, 0x6, 0x7, 0x9, 0x8, 0x2}, {0x80000001, 0x9, 0xffffffff, 0xa6, 0x9, 0x3}, {0xbd6, 0x80, 0x1, 0x3, 0x2488, 0x7d}, {0x6, 0x8, 0x29f4, 0xab, 0x5, 0x6}, {0x2, 0x1, 0xd95, 0x6, 0xd3, 0x1f2000}, {0x2, 0x8000, 0x3, 0x9, 0x8000, 0x1}, {0x2, 0x0, 0xf, 0x5f, 0xc97, 0x400}, {0x0, 0x0, 0x1, 0x0, 0x1a30dcf8, 0x3}, {0x3, 0x7223, 0xfffeffff, 0x8, 0x46, 0x1}, {0x8000, 0xfffffd9c, 0x7f, 0x3, 0xfffffffb, 0xf}, {0x1, 0x4, 0x8, 0x7, 0x0, 0x10000}, {0x400, 0x1a, 0x100, 0x7f, 0xfffffffe, 0x8}, {0x9, 0x9, 0x7, 0xfffff2b2, 0x6, 0x4}, {0xc1, 0x7f, 0xd9, 0x9, 0x0, 0x751b}, {0x8, 0x4, 0x2, 0x1, 0x8, 0x99b1}, {0x0, 0x8, 0x8, 0xfffffffa, 0x1, 0x56}, {0x6, 0x9, 0x9, 0x6, 0x8, 0x9}, {0x24d, 0x3, 0x4, 0x0, 0x5, 0x2}, {0x4, 0x1ff, 0x8001, 0x8, 0x7827, 0x40}, {0x1000, 0x80, 0x4, 0x5, 0x9, 0xfe8}, {0x6, 0x95f8, 0x7, 0x8, 0x4, 0x5}, {0x61ea101f, 0x5, 0x0, 0x6, 0x7f, 0x8}, {0x9, 0x9, 0x0, 0x2c303b25, 0x7f, 0x2}, {0x9, 0x8, 0x3, 0x5, 0x8, 0xfffffff9}, {0x100, 0x9, 0x7fffffff, 0x7, 0x0, 0xe20a}, {0x8, 0x1ff, 0x5, 0x8, 0x3, 0x7}, {0x4, 0x10000, 0x133, 0x3ff, 0x1, 0xfffffffd}, {0x6, 0x0, 0x1, 0x386, 0xfffffffc, 0x2}, {0x9, 0x7ff, 0x3854, 0x10001, 0x72, 0xffff406c}, {0x6, 0x7fff, 0x3, 0x100, 0x120, 0x3}, {0x5, 0x4, 0x3, 0x100, 0x9, 0x3}, {0x1ff, 0x7, 0x2, 0x10000, 0x4, 0x8}, {0x3, 0x8001, 0x3, 0x1, 0xa, 0x5}, {0xf0, 0xfffffff1, 0xb, 0xe5b, 0x101, 0x4}, {0x5, 0x4, 0x5, 0xffff7fff, 0xffffffff, 0x100}, {0x9, 0xe5d, 0x3, 0x4, 0x7f, 0x10001}, {0x0, 0x0, 0xfffffffe, 0xffffffff, 0x4311, 0x7fffffff}, {0x2, 0x0, 0xf1, 0x4, 0x3f, 0x6}, {0x8, 0x2f0, 0x7, 0x800, 0xc97a, 0x1}, {0xffffff97, 0x469, 0x3, 0x7, 0x35b, 0xa}, {0x3, 0x1, 0x2, 0xffffff80, 0x8, 0x3ff}, {0x0, 0x40, 0x8c, 0x1, 0x8, 0x1c0}, {0x2, 0x6, 0x7f, 0x29e, 0x2, 0x5}, {0xf, 0x80000000, 0x4, 0x1, 0xd1c, 0x8}, {0x1, 0x2, 0x5, 0x8, 0x4, 0x7}, {0x8, 0x3, 0x8001, 0xe, 0x9, 0x1100}, {0x1, 0xffffcae8, 0x7, 0x4, 0x40000000, 0x9}, {0x6, 0x4, 0xb, 0x7, 0xfffff240, 0xaec}, {0x2, 0xf9, 0x1000, 0x444, 0x8, 0xffffffff}, {0x3, 0x2, 0x0, 0xfffffff8, 0x4, 0x9}, {0x7, 0x8d, 0x40, 0x80, 0xcd, 0x9}], [{}, {0x4, 0x1}, {0x5}, {0x3}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x6}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {0x0, 0x1}, {}, {0x3}, {0x4}, {0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x3}, {}, {0x2}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x1, 0xbee0fdf3faf3c4c2}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5}, {0x1}, {0x1}, {0x3}, {0x2}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x5}, {0x4}, {0x2}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x78e1953cfbcb0f5d, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x7}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x2, 0x7dfb0c4941bfa93c}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x7, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x5}}}}]}]}}]}, 0x1cdc}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 32.27776962s ago: executing program 1 (id=5071): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x20102, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2400c800) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 32.134327905s ago: executing program 1 (id=5073): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newpolicy={0xfc, 0x13, 0x101, 0x0, 0x20000000, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0xd, 0x8400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5, 0x0, 0x0, 0x0, 0x6, 0x3, 0x4, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0x8}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x3, 0x1, 0x1, 0x5, 0x2, 0x80000009}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000480)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 31.924512197s ago: executing program 9 (id=5074): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x678a, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x1000401) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x20008000) socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000740)={0x1, &(0x7f0000000780)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) close_range(r1, 0xffffffffffffffff, 0x2000000000000) 31.782326892s ago: executing program 9 (id=5077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000100)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005000c0008"], 0x4a) 31.596371751s ago: executing program 9 (id=5080): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x12}, 0xe0c0, 0x8, 0x43a1bd76, 0x8, 0xb, 0xa, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_create_resource$binfmt(&(0x7f0000001800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000001900)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xfd) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 31.439718427s ago: executing program 9 (id=5081): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = fsopen(&(0x7f0000000340)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000500)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9ZR\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\x00\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='\x00\xe5\xff\xff\xff\xff\xff\xff\xff2', &(0x7f00000006c0)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='\x00', &(0x7f0000000740)='(!\xef(.\x00\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000780)='\xe6\xdf\xf4\x89\b,\xcd\x9dP\x9e\xd7\xe3/\xd2=#\xc8\xb7\x98\f\x87\xcf\x00\x00\x00\x00\x00\x00\x00\x9a\x8e\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000007c0)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0x0, 0x0}) futex$unlock_wake_list64(r0, 0x8b, 0x1, &(0x7f00000004c0)={r1, r2+10000000}, 0x0, 0xfd3c) socket$netlink(0x10, 0x3, 0x0) 2.472583396s ago: executing program 2 (id=5293): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000001c0)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000002c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000000f00)=""/4071, 0xfe7, 0x10117, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000003000), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000003040)=0xffff1884, 0x4) 2.407599063s ago: executing program 5 (id=5295): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="948b", 0x2}], 0x1}, 0x8040) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) 2.372345606s ago: executing program 2 (id=5296): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000740)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130fe", 0x19}, {&(0x7f00000008c0)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97", 0xac}], 0x2}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="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", 0x140}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000c00)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000c40)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.358860118s ago: executing program 7 (id=5298): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000001c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) ppoll(&(0x7f0000000300)=[{r0, 0x4804}], 0x1, &(0x7f0000000340)={0x77359400}, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x92) 2.341791769s ago: executing program 2 (id=5299): syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3c8100000086dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e", @ANYRES32=0x41424344, @ANYBLOB="4a02"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) listen(0xffffffffffffffff, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 2.074246757s ago: executing program 2 (id=5302): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0xfffd, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) 1.990432745s ago: executing program 6 (id=5304): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x14, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000400), &(0x7f0000000440)=@tcp6=r2}, 0x20) recvmmsg$unix(r2, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10040, 0x0) 1.964863068s ago: executing program 8 (id=5305): socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0xa3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.962227998s ago: executing program 6 (id=5306): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2980, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x3, 0x0, 0x5, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080), 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) 1.905026064s ago: executing program 6 (id=5307): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = syz_create_resource$futex(&(0x7f0000000240)=0x1) futex(r1, 0x6, 0x1, 0x0, r1, 0x1) 1.84656884s ago: executing program 8 (id=5308): r0 = socket$igmp(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x10000, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x400, 0x2, 0xfffffffe, 0x6, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, 0x0) 1.769133928s ago: executing program 8 (id=5309): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_create_resource$futex(&(0x7f0000000340)=0x1) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) futex$unlock_wake_list64(r0, 0x8b, 0x1, &(0x7f00000004c0)={r1, r2+10000000}, 0x0, 0xfd3c) socket$netlink(0x10, 0x3, 0x0) 1.543810371s ago: executing program 5 (id=5310): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7fffffff}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0xd557, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000001) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x34020000) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/4096, 0x1019}], 0x1, 0x80000001, 0x9) 1.480183518s ago: executing program 7 (id=5311): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x87, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x3}, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000740)=@hci, 0x19, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000900)={0x0, 0xfffffff5, &(0x7f0000000940)=[{&(0x7f0000000980)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f00000022c0)=ANY=[], 0x4) 1.217665225s ago: executing program 5 (id=5312): socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000600), 0x101101, 0x0) socket$tipc(0x1e, 0x5, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x101000, 0x0) sendmmsg$unix(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x1c, 0x1, 0x1, [r0, r2, r1]}}], 0x20, 0x10040}}], 0x1, 0x10) 962.595161ms ago: executing program 5 (id=5313): socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x200, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x8004, &(0x7f0000000300)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@noquota}]}, 0x1, 0x7d2, &(0x7f0000000a40)="$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") socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a00210f29bd7000fadbdf251c000000ff000005000000000800", @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 559.398683ms ago: executing program 8 (id=5314): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x15}, 0xb000, 0x8, 0x43a1bd76, 0x0, 0xb, 0x17, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) socket(0x200000000000011, 0x2, 0xd) timerfd_gettime(0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1208002, &(0x7f0000000640)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@abort}]}, 0x1, 0x5d8, &(0x7f0000000c80)="$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") quotactl_fd$Q_SETINFO(r2, 0xffffffff80000601, 0x0, &(0x7f0000000780)={0x3, 0x0, 0x0, 0x3}) 554.251213ms ago: executing program 6 (id=5315): syz_io_uring_complete(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000ac0)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, &(0x7f0000000b80)='27', 0x2) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, 0x0) mount$9p_unix(&(0x7f0000000bc0)='./proc/thread-self/fail-nth\x00', &(0x7f0000000c00)='./proc\x00', &(0x7f0000000c40), 0x800000, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d756e69782c006b01efbd22d54bb5468336ee0f51a8e343a09d1b37e6aac7322b20a820e53010edac5c09efaade155f399f063ab59c83d55089cc0977b879e3a5c257a80f8f7d7a3be01465da1095a1f6030ba5234dddf64e58a0d9c437ada6a6a9376bc3c1f9bc7a1dc146d276f8dcdb3bb03c197ba8940d4c19765820d64676a29bfe1e047036a4b06e15ad99611546fc9388f8ca4f7c023c2932ef6b8dc18f89b0a5ca3eed59348eddbe725fe30c78"]) 413.328327ms ago: executing program 6 (id=5316): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @empty}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x2e) getsockopt(r4, 0x111, 0x3, 0x0, &(0x7f00000004c0)) 387.83662ms ago: executing program 2 (id=5317): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000030000000317c8c53adb1b8cb300000000000001"], 0x0, 0x42}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f"], 0xcfa4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 342.722725ms ago: executing program 7 (id=5318): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000700)={0x0, 0x0, 0x0, 'queue0\x00', 0xa3e}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000007c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000800)={{0x0, 0x2, 0x3}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000880)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x0) 318.872457ms ago: executing program 8 (id=5319): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0x2}, 0x50, 0x0, 0x2, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x1000}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000040)={'erspan0\x00', @random='\x00\x00\x00\x00\x00 '}) 288.898651ms ago: executing program 6 (id=5320): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff0}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180)=0x4, 0x4) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x14, &(0x7f0000000ac0)=[{&(0x7f0000000bc0)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000c00)={0x0, 0x2, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 163.361644ms ago: executing program 5 (id=5321): setresgid(0x0, 0xee01, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080), 0xff, 0x4aa, &(0x7f00000000c0)="$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") r0 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x0) open_by_handle_at(r1, 0x0, 0x20101) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000006c0)=ANY=[@ANYBLOB="090000000000000007000000020000000700"]) 891.8µs ago: executing program 7 (id=5322): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00', 0x8000}) close_range(r0, 0xffffffffffffffff, 0x0) 368.69µs ago: executing program 8 (id=5323): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000740)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newtfilter={0x64, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0xffff, 0xffff}, {0x300, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1002}, {0x1003, 0x8}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x1]}]}}]}]}]}}]}, 0x64}}, 0x880) write(r1, &(0x7f0000000940)="443e4cd0", 0x4) 0s ago: executing program 2 (id=5324): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x880000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x9408, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x15, 0x1c, &(0x7f0000001100)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a0085000000a0000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unlink(0x0) kernel console output (not intermixed with test programs): 0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23044 comm="syz.3.4932" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62926afb19 code=0x7ffc0000 [ 448.054967][T23051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4935'. [ 449.964069][T23018] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 450.002196][T23061] syz.3.4947 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 450.020629][T23060] rxe_eth0 speed is unknown, defaulting to 1000 [ 450.175715][T23060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4938'. [ 451.184848][T23057] Set syz1 is full, maxelem 65536 reached [ 451.269380][T23081] loop0: detected capacity change from 0 to 512 [ 451.313733][T23081] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size [ 451.316370][T23090] FAULT_INJECTION: forcing a failure. [ 451.316370][T23090] name failslab, interval 1, probability 0, space 0, times 0 [ 451.316410][T23090] CPU: 1 UID: 0 PID: 23090 Comm: syz.5.4951 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 451.316448][T23090] Tainted: [W]=WARN [ 451.316456][T23090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 451.316492][T23090] Call Trace: [ 451.316501][T23090] [ 451.316512][T23090] __dump_stack+0x1d/0x30 [ 451.316568][T23090] dump_stack_lvl+0x95/0xd0 [ 451.316601][T23090] dump_stack+0x15/0x1b [ 451.316632][T23090] should_fail_ex+0x259/0x270 [ 451.316693][T23090] ? vrf_netns_init+0x97/0x110 [ 451.316731][T23090] should_failslab+0x8c/0xb0 [ 451.316781][T23090] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 451.316884][T23090] ? vrf_netns_init+0x97/0x110 [ 451.316924][T23090] kmemdup_noprof+0x2b/0x70 [ 451.316992][T23090] vrf_netns_init+0x97/0x110 [ 451.317035][T23090] ops_init+0x22a/0x2e0 [ 451.317078][T23090] setup_net+0x9f/0x230 [ 451.317194][T23090] copy_net_ns+0x339/0x490 [ 451.317233][T23090] create_new_namespaces+0x1f6/0x420 [ 451.317322][T23090] unshare_nsproxy_namespaces+0x115/0x150 [ 451.317359][T23090] ksys_unshare+0x3a3/0x690 [ 451.317402][T23090] __x64_sys_unshare+0x1f/0x30 [ 451.317516][T23090] x64_sys_call+0x1e33/0x2550 [ 451.317557][T23090] do_syscall_64+0x112/0x360 [ 451.317604][T23090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.317654][T23090] RIP: 0033:0x7f725f7ffb19 [ 451.317691][T23090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.317718][T23090] RSP: 002b:00007f725e24f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 451.317747][T23090] RAX: ffffffffffffffda RBX: 00007f725fa85fa0 RCX: 00007f725f7ffb19 [ 451.317764][T23090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 451.317822][T23090] RBP: 00007f725f897b70 R08: 0000000000000000 R09: 0000000000000000 [ 451.317841][T23090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.317859][T23090] R13: 00007f725fa86038 R14: 00007f725fa85fa0 R15: 00007ffce4f2c838 [ 451.317887][T23090] [ 451.524713][T23081] loop0: detected capacity change from 0 to 512 [ 451.546555][T23081] EXT4-fs: Ignoring removed nomblk_io_submit option [ 451.582314][T23081] EXT4-fs warning (device loop0): ext4_multi_mount_protect:313: fsck is running on the filesystem [ 451.582593][T23081] EXT4-fs warning (device loop0): ext4_multi_mount_protect:313: MMP failure info: last update time: 72057595707060727, last update node: , last update device: loop14 [ 451.745750][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 451.745773][ T29] audit: type=1400 audit(1793810962.711:2971): avc: denied { name_bind } for pid=23100 comm="syz.5.4956" src=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 452.217481][ T29] audit: type=1400 audit(1793810963.181:2972): avc: denied { write } for pid=23122 comm="syz.5.4965" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 452.360614][T23121] loop9: detected capacity change from 0 to 512 [ 452.524470][T23131] FAULT_INJECTION: forcing a failure. [ 452.524470][T23131] name failslab, interval 1, probability 0, space 0, times 0 [ 452.524505][T23131] CPU: 0 UID: 0 PID: 23131 Comm: syz.9.4968 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 452.524578][T23131] Tainted: [W]=WARN [ 452.524586][T23131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 452.524601][T23131] Call Trace: [ 452.524608][T23131] [ 452.524616][T23131] __dump_stack+0x1d/0x30 [ 452.524650][T23131] dump_stack_lvl+0x95/0xd0 [ 452.524732][T23131] dump_stack+0x15/0x1b [ 452.524764][T23131] should_fail_ex+0x259/0x270 [ 452.524805][T23131] ? __kernfs_new_node+0x70/0x440 [ 452.524839][T23131] should_failslab+0x8c/0xb0 [ 452.524933][T23131] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 452.524973][T23131] ? __kernfs_new_node+0x70/0x440 [ 452.525015][T23131] __kernfs_new_node+0x70/0x440 [ 452.525098][T23131] kernfs_new_node+0x107/0x140 [ 452.525124][T23131] __kernfs_create_file+0x4b/0x180 [ 452.525212][T23131] ? __pfx_class_attr_show+0x10/0x10 [ 452.525255][T23131] ? __pfx_class_attr_store+0x10/0x10 [ 452.525379][T23131] sysfs_add_file_mode_ns+0x132/0x1b0 [ 452.525423][T23131] sysfs_create_file_ns+0xd9/0x120 [ 452.525459][T23131] class_create_file_ns+0xf4/0x130 [ 452.525547][T23131] netdev_class_create_file_ns+0x24/0x30 [ 452.525573][T23131] bond_create_sysfs+0x40/0xb0 [ 452.525610][T23131] bond_net_init+0x86/0xa0 [ 452.525643][T23131] ops_init+0x22a/0x2e0 [ 452.525741][T23131] setup_net+0x9f/0x230 [ 452.525777][T23131] copy_net_ns+0x339/0x490 [ 452.525812][T23131] create_new_namespaces+0x1f6/0x420 [ 452.525843][T23131] unshare_nsproxy_namespaces+0x115/0x150 [ 452.525924][T23131] ksys_unshare+0x3a3/0x690 [ 452.525970][T23131] __x64_sys_unshare+0x1f/0x30 [ 452.526018][T23131] x64_sys_call+0x1e33/0x2550 [ 452.526140][T23131] do_syscall_64+0x112/0x360 [ 452.526189][T23131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.526216][T23131] RIP: 0033:0x7f49d98afb19 [ 452.526234][T23131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.526295][T23131] RSP: 002b:00007f49d82ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 452.526324][T23131] RAX: ffffffffffffffda RBX: 00007f49d9b35fa0 RCX: 00007f49d98afb19 [ 452.526421][T23131] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 452.526435][T23131] RBP: 00007f49d9947b70 R08: 0000000000000000 R09: 0000000000000000 [ 452.526450][T23131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.526463][T23131] R13: 00007f49d9b36038 R14: 00007f49d9b35fa0 R15: 00007ffe1a45dc18 [ 452.526508][T23131] [ 452.604204][T23131] rxe_eth0 speed is unknown, defaulting to 1000 [ 452.629058][T23129] loop0: detected capacity change from 0 to 4096 [ 452.660269][T23129] EXT4-fs: Ignoring removed orlov option [ 452.703387][T23129] EXT4-fs (loop0): invalid #clusters per group: 32768 [ 452.878164][T23135] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4970'. [ 453.003298][T23133] loop0: detected capacity change from 0 to 164 [ 453.042524][T23139] loop5: detected capacity change from 0 to 1024 [ 453.057106][T23139] EXT4-fs: Ignoring removed nobh option [ 453.078677][T23139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 453.078896][T23139] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.115865][ T29] audit: type=1400 audit(1793810964.081:2973): avc: denied { write } for pid=23138 comm="syz.5.4972" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 453.119056][T23139] EXT4-fs error (device loop5): ext4_free_blocks:6717: comm syz.5.4972: Freeing blocks not in datazone - block = 0, count = 16 [ 453.253780][T15389] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm kworker/u8:14: bg 0: block 112: padding at end of block bitmap is not set [ 453.256125][T15389] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 453.256160][T15389] EXT4-fs (loop5): This should not happen!! Data will be lost [ 453.256160][T15389] [ 453.256181][T15389] EXT4-fs (loop5): Total free blocks count 0 [ 453.256196][T15389] EXT4-fs (loop5): Free/Dirty block details [ 453.256208][T15389] EXT4-fs (loop5): free_blocks=16 [ 453.256264][T15389] EXT4-fs (loop5): dirty_blocks=16 [ 453.256280][T15389] EXT4-fs (loop5): Block reservation details [ 453.256294][T15389] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 453.257238][T21322] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 453.345167][T23150] FAULT_INJECTION: forcing a failure. [ 453.345167][T23150] name failslab, interval 1, probability 0, space 0, times 0 [ 453.345281][T23150] CPU: 0 UID: 0 PID: 23150 Comm: syz.3.4976 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 453.345326][T23150] Tainted: [W]=WARN [ 453.345341][T23150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 453.345361][T23150] Call Trace: [ 453.345371][T23150] [ 453.345382][T23150] __dump_stack+0x1d/0x30 [ 453.345418][T23150] dump_stack_lvl+0x95/0xd0 [ 453.345452][T23150] dump_stack+0x15/0x1b [ 453.345547][T23150] should_fail_ex+0x259/0x270 [ 453.345581][T23150] ? alloc_pwq+0x70b/0x960 [ 453.345621][T23150] should_failslab+0x8c/0xb0 [ 453.345667][T23150] kmem_cache_alloc_node_noprof+0x60/0x3e0 [ 453.345756][T23150] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 453.345795][T23150] ? alloc_pwq+0x70b/0x960 [ 453.345823][T23150] alloc_pwq+0x70b/0x960 [ 453.345868][T23150] apply_wqattrs_prepare+0x20e/0x8c0 [ 453.345901][T23150] ? alloc_workqueue_va+0x7b5/0x15d0 [ 453.345947][T23150] alloc_workqueue_va+0xa05/0x15d0 [ 453.345993][T23150] alloc_workqueue_noprof+0x84/0xb0 [ 453.346203][T23150] ? nci_hci_allocate+0x33/0x180 [ 453.346231][T23150] ? should_failslab+0x8c/0xb0 [ 453.346287][T23150] nci_register_device+0x2f5/0x510 [ 453.346379][T23150] virtual_ncidev_open+0xca/0x130 [ 453.346418][T23150] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 453.346463][T23150] misc_open+0x1df/0x220 [ 453.346563][T23150] chrdev_open+0x2eb/0x3a0 [ 453.346591][T23150] do_dentry_open+0x496/0xa40 [ 453.346645][T23150] ? __pfx_chrdev_open+0x10/0x10 [ 453.346726][T23150] vfs_open_consume+0x46/0x1f0 [ 453.346762][T23150] path_openat+0xc16/0x11c0 [ 453.346824][T23150] do_file_open+0x16c/0x290 [ 453.346880][T23150] do_sys_openat2+0xa1/0x140 [ 453.346994][T23150] __x64_sys_openat+0xf2/0x120 [ 453.347031][T23150] x64_sys_call+0x1f72/0x2550 [ 453.347138][T23150] do_syscall_64+0x112/0x360 [ 453.347184][T23150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.347215][T23150] RIP: 0033:0x7f62926afb19 [ 453.347242][T23150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.347264][T23150] RSP: 002b:00007f6291107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 453.347286][T23150] RAX: ffffffffffffffda RBX: 00007f6292935fa0 RCX: 00007f62926afb19 [ 453.347305][T23150] RDX: 0000000000000002 RSI: 00002000000005c0 RDI: ffffffffffffff9c [ 453.347426][T23150] RBP: 00007f6292747b70 R08: 0000000000000000 R09: 0000000000000000 [ 453.347440][T23150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.347456][T23150] R13: 00007f6292936038 R14: 00007f6292935fa0 R15: 00007ffd233112f8 [ 453.347477][T23150] [ 453.430788][T23155] loop5: detected capacity change from 0 to 256 [ 453.501037][T23155] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 454.179894][T23159] netlink: 'syz.3.4978': attribute type 1 has an invalid length. [ 454.214943][T23159] 8021q: adding VLAN 0 to HW filter on device bond4 [ 454.274024][T23159] bond4: (slave veth7): Enslaving as an active interface with a down link [ 454.307570][T23159] bond4: (slave macvlan0): making interface the new active one [ 454.310241][T23159] bond4: (slave macvlan0): Enslaving as an active interface with an up link [ 454.458388][T23116] Set syz1 is full, maxelem 65536 reached [ 454.507453][T23176] FAULT_INJECTION: forcing a failure. [ 454.507453][T23176] name failslab, interval 1, probability 0, space 0, times 0 [ 454.507497][T23176] CPU: 0 UID: 0 PID: 23176 Comm: syz.2.4984 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 454.507610][T23176] Tainted: [W]=WARN [ 454.507621][T23176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 454.507641][T23176] Call Trace: [ 454.507651][T23176] [ 454.507663][T23176] __dump_stack+0x1d/0x30 [ 454.507701][T23176] dump_stack_lvl+0x95/0xd0 [ 454.507736][T23176] dump_stack+0x15/0x1b [ 454.507810][T23176] should_fail_ex+0x259/0x270 [ 454.507855][T23176] should_failslab+0x8c/0xb0 [ 454.507908][T23176] __kvmalloc_node_noprof+0x14f/0x5b0 [ 454.507938][T23176] ? nf_hook_entries_grow+0x1cb/0x460 [ 454.507979][T23176] ? nf_hook_entries_grow+0x1cb/0x460 [ 454.508019][T23176] nf_hook_entries_grow+0x1cb/0x460 [ 454.508056][T23176] ? rb_insert_color+0x6e/0x2a0 [ 454.508139][T23176] __nf_register_net_hook+0x16e/0x4d0 [ 454.508181][T23176] nf_register_net_hook+0x88/0x130 [ 454.508213][T23176] nf_register_net_hooks+0x44/0x150 [ 454.508301][T23176] selinux_nf_register+0x21/0x30 [ 454.508329][T23176] ops_init+0x22a/0x2e0 [ 454.508487][T23176] setup_net+0x9f/0x230 [ 454.508528][T23176] copy_net_ns+0x339/0x490 [ 454.508570][T23176] create_new_namespaces+0x1f6/0x420 [ 454.508680][T23176] unshare_nsproxy_namespaces+0x115/0x150 [ 454.508707][T23176] ksys_unshare+0x3a3/0x690 [ 454.508834][T23176] __x64_sys_unshare+0x1f/0x30 [ 454.508867][T23176] x64_sys_call+0x1e33/0x2550 [ 454.508904][T23176] do_syscall_64+0x112/0x360 [ 454.509004][T23176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.509055][T23176] RIP: 0033:0x7f3cbd41fb19 [ 454.509074][T23176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.509094][T23176] RSP: 002b:00007f3cbbe77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 454.509119][T23176] RAX: ffffffffffffffda RBX: 00007f3cbd6a5fa0 RCX: 00007f3cbd41fb19 [ 454.509197][T23176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 454.509217][T23176] RBP: 00007f3cbd4b7b70 R08: 0000000000000000 R09: 0000000000000000 [ 454.509237][T23176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.509256][T23176] R13: 00007f3cbd6a6038 R14: 00007f3cbd6a5fa0 R15: 00007ffc4a58d5f8 [ 454.509286][T23176] [ 454.957995][T23188] loop3: detected capacity change from 0 to 128 [ 454.958377][T23188] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000000' [ 455.087702][ T29] audit: type=1400 audit(1793810966.051:2974): avc: denied { watch } for pid=23189 comm="syz.5.4990" path="/" dev="ramfs" ino=71536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 455.393225][ T29] audit: type=1400 audit(1793810966.361:2975): avc: denied { write } for pid=23198 comm="syz.0.4994" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 455.516922][T23204] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input21 [ 455.626942][T23210] tipc: Started in network mode [ 455.626962][T23210] tipc: Node identity 4, cluster identity 4711 [ 455.626978][T23210] tipc: Node number set to 4 [ 455.713599][T23213] loop3: detected capacity change from 0 to 164 [ 455.760706][T23216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5000'. [ 455.981675][T23221] loop3: detected capacity change from 0 to 512 [ 456.010076][T23221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.010186][T23221] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.036533][ T29] audit: type=1400 audit(1793810967.001:2976): avc: denied { write } for pid=23220 comm="syz.3.5002" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 456.088161][ T29] audit: type=1400 audit(1793810967.051:2977): avc: denied { write } for pid=17821 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 456.088625][T17821] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 456.088907][T17821] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 456.156547][T23211] xt_hashlimit: size too large, truncated to 1048576 [ 456.249396][T23226] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.5004'. [ 456.305075][T17821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.390753][T23234] Can't find ip_set type has [ 456.430720][T23235] rxe_eth0 speed is unknown, defaulting to 1000 [ 456.468058][T23239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5011'. [ 456.507784][T23243] netlink: 'syz.9.5012': attribute type 1 has an invalid length. [ 456.593185][T23243] 8021q: adding VLAN 0 to HW filter on device bond3 [ 456.626992][T23249] bond3: (slave veth3): Enslaving as an active interface with a down link [ 456.653926][T23243] bond3: (slave dummy0): making interface the new active one [ 456.654735][T23243] dummy0: entered promiscuous mode [ 456.654913][T23243] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 456.709604][T23243] bond3 (unregistering): (slave veth3): Releasing active interface [ 456.719635][T23243] bond3 (unregistering): (slave dummy0): Releasing active interface [ 456.719712][T23243] dummy0: left promiscuous mode [ 456.735225][T23243] bond3 (unregistering): Released all slaves [ 456.806666][T23235] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.806711][T23235] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.807249][T23235] bridge_slave_0: entered allmulticast mode [ 456.809050][T23235] bridge_slave_0: entered promiscuous mode [ 456.810805][T23235] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.810848][T23235] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.811206][T23235] bridge_slave_1: entered allmulticast mode [ 456.811638][T23235] bridge_slave_1: entered promiscuous mode [ 456.839010][T23235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.842494][T23235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.866312][T23235] team0: Port device team_slave_0 added [ 456.868379][T23235] team0: Port device team_slave_1 added [ 456.894246][T23235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.894296][T23235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.894388][T23235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.897186][T23235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.897232][T23235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.897290][T23235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.949639][T23235] hsr_slave_0: entered promiscuous mode [ 456.952685][T23235] hsr_slave_1: entered promiscuous mode [ 456.953336][T23235] debugfs: 'hsr0' already exists in 'hsr' [ 456.953379][T23235] Cannot create hsr debugfs directory [ 456.993742][T21473] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.994037][T21473] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.994240][T21473] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.994385][T21473] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.064015][T23272] netlink: 'syz.2.5021': attribute type 1 has an invalid length. [ 457.082383][T23272] 8021q: adding VLAN 0 to HW filter on device bond3 [ 457.103065][T23272] bond3: (slave geneve2): making interface the new active one [ 457.105541][T23272] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 457.141486][T23272] syz.2.5021 (23272) used greatest stack depth: 8408 bytes left [ 457.162160][T21473] Bluetooth: hci0: Frame reassembly failed (-84) [ 457.177110][T23235] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.214946][T23235] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.264770][T23235] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.315594][T23235] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.381551][T23235] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 457.384177][T23235] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 457.384558][T23235] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 457.386805][T23235] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 457.387212][T23235] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 457.389361][T23235] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 457.389769][T23235] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 457.393496][T23235] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 457.470914][T23235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.482104][T23235] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.485914][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.485952][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.489884][T12795] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.489924][T12795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.540955][T23235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.561971][T23235] veth0_vlan: entered promiscuous mode [ 457.564344][T23235] veth1_vlan: entered promiscuous mode [ 457.579685][T23235] veth0_macvtap: entered promiscuous mode [ 457.584630][T23235] veth1_macvtap: entered promiscuous mode [ 457.596508][T23235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.600488][T23235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.622102][ T38] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.641702][ T38] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.642760][ T38] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.642808][ T38] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.684903][ T29] audit: type=1400 audit(1793810968.651:2978): avc: denied { ioctl } for pid=23289 comm="syz.9.5034" path="socket:[72818]" dev="sockfs" ino=72818 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 458.396971][T23297] loop9: detected capacity change from 0 to 512 [ 458.418576][T23297] EXT4-fs error (device loop9): ext4_orphan_get:1404: inode #15: comm syz.9.5026: iget: bad i_size value: 38620345925642 [ 458.418610][T23297] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 458.419296][T23297] EXT4-fs error (device loop9): ext4_orphan_get:1409: comm syz.9.5026: couldn't read orphan inode 15 (err -117) [ 458.419372][T23297] loop9: lost filesystem error report for type 5 error -117 [ 458.420717][T23297] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.481198][ T29] audit: type=1400 audit(1793810969.451:2979): avc: denied { write } for pid=23296 comm="syz.9.5026" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 458.483079][ T29] audit: type=1400 audit(1793810969.451:2980): avc: denied { write } for pid=23296 comm="syz.9.5026" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 458.546451][ T29] audit: type=1400 audit(1793810969.511:2981): avc: denied { write } for pid=23296 comm="syz.9.5026" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 458.611654][T21473] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm kworker/u8:18: bg 0: block 5: invalid block bitmap [ 458.611985][T21473] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28 [ 458.612017][T21473] EXT4-fs (loop9): This should not happen!! Data will be lost [ 458.612017][T21473] [ 458.612073][T21473] EXT4-fs (loop9): Total free blocks count 0 [ 458.612090][T21473] EXT4-fs (loop9): Free/Dirty block details [ 458.612106][T21473] EXT4-fs (loop9): free_blocks=0 [ 458.612122][T21473] EXT4-fs (loop9): dirty_blocks=4 [ 458.612137][T21473] EXT4-fs (loop9): Block reservation details [ 458.612152][T21473] EXT4-fs (loop9): i_reserved_data_blocks=4 [ 458.613419][T19384] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.839683][T23322] FAULT_INJECTION: forcing a failure. [ 458.839683][T23322] name failslab, interval 1, probability 0, space 0, times 0 [ 458.839758][T23322] CPU: 0 UID: 0 PID: 23322 Comm: syz.0.5037 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 458.839842][T23322] Tainted: [W]=WARN [ 458.839853][T23322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 458.839885][T23322] Call Trace: [ 458.839896][T23322] [ 458.839908][T23322] __dump_stack+0x1d/0x30 [ 458.839946][T23322] dump_stack_lvl+0x95/0xd0 [ 458.840001][T23322] dump_stack+0x15/0x1b [ 458.840032][T23322] should_fail_ex+0x259/0x270 [ 458.840073][T23322] ? security_inode_alloc+0x37/0x100 [ 458.840167][T23322] should_failslab+0x8c/0xb0 [ 458.840343][T23322] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 458.840401][T23322] ? security_inode_alloc+0x37/0x100 [ 458.840431][T23322] security_inode_alloc+0x37/0x100 [ 458.840460][T23322] inode_init_always_gfp+0x49b/0x4e0 [ 458.840537][T23322] ? __pfx_proc_alloc_inode+0x10/0x10 [ 458.840575][T23322] alloc_inode+0x58/0x170 [ 458.840670][T23322] new_inode+0x1d/0xe0 [ 458.840705][T23322] proc_sys_make_inode+0x31/0x2a0 [ 458.840779][T23322] proc_sys_lookup+0x1db/0x310 [ 458.840815][T23322] ? __pfx_proc_sys_lookup+0x10/0x10 [ 458.840850][T23322] lookup_open+0x6aa/0x1050 [ 458.840977][T23322] path_openat+0x492/0x11c0 [ 458.841026][T23322] do_file_open+0x16c/0x290 [ 458.841095][T23322] do_sys_openat2+0xa1/0x140 [ 458.841135][T23322] __x64_sys_open+0xe6/0x110 [ 458.841172][T23322] x64_sys_call+0x23a8/0x2550 [ 458.841209][T23322] do_syscall_64+0x112/0x360 [ 458.841256][T23322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.841296][T23322] RIP: 0033:0x7f9f327afb19 [ 458.841319][T23322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.841347][T23322] RSP: 002b:00007f9f311ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 458.841374][T23322] RAX: ffffffffffffffda RBX: 00007f9f32a35fa0 RCX: 00007f9f327afb19 [ 458.841524][T23322] RDX: 0000000000000000 RSI: 000000000010b842 RDI: 0000200000000480 [ 458.841541][T23322] RBP: 00007f9f32847b70 R08: 0000000000000000 R09: 0000000000000000 [ 458.841595][T23322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.841677][T23322] R13: 00007f9f32a36038 R14: 00007f9f32a35fa0 R15: 00007ffff37549b8 [ 458.841705][T23322] [ 459.142880][T23330] FAULT_INJECTION: forcing a failure. [ 459.142880][T23330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.142918][T23330] CPU: 1 UID: 0 PID: 23330 Comm: syz.9.5039 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 459.143016][T23330] Tainted: [W]=WARN [ 459.143027][T23330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 459.143046][T23330] Call Trace: [ 459.143162][T23330] [ 459.143171][T23330] __dump_stack+0x1d/0x30 [ 459.143208][T23330] dump_stack_lvl+0x95/0xd0 [ 459.143240][T23330] dump_stack+0x15/0x1b [ 459.143281][T23330] should_fail_ex+0x259/0x270 [ 459.143313][T23330] should_fail+0xb/0x20 [ 459.143373][T23330] should_fail_usercopy+0x1a/0x20 [ 459.143458][T23330] _copy_from_iter+0xcc/0xe80 [ 459.143491][T23330] ? __alloc_skb+0x516/0x6f0 [ 459.143535][T23330] ? __alloc_skb+0x209/0x6f0 [ 459.143580][T23330] netlink_sendmsg+0x4d6/0x740 [ 459.143632][T23330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.143654][T23330] ____sys_sendmsg+0x54a/0x590 [ 459.143694][T23330] ___sys_sendmsg+0x195/0x1e0 [ 459.143731][T23330] __x64_sys_sendmsg+0xd4/0x160 [ 459.143757][T23330] x64_sys_call+0x22ab/0x2550 [ 459.143854][T23330] do_syscall_64+0x112/0x360 [ 459.143902][T23330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.143934][T23330] RIP: 0033:0x7f49d98afb19 [ 459.144029][T23330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.144055][T23330] RSP: 002b:00007f49d82ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.144081][T23330] RAX: ffffffffffffffda RBX: 00007f49d9b35fa0 RCX: 00007f49d98afb19 [ 459.144100][T23330] RDX: 0000000020040040 RSI: 0000200000000180 RDI: 0000000000000003 [ 459.144126][T23330] RBP: 00007f49d9947b70 R08: 0000000000000000 R09: 0000000000000000 [ 459.144144][T23330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.144193][T23330] R13: 00007f49d9b36038 R14: 00007f49d9b35fa0 R15: 00007ffe1a45dc18 [ 459.144220][T23330] [ 459.219135][ T4759] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 459.596341][T23304] Set syz1 is full, maxelem 65536 reached [ 459.794163][T23347] loop1: detected capacity change from 0 to 128 [ 459.856276][ T29] audit: type=1400 audit(1793810970.821:2982): avc: denied { shutdown } for pid=23356 comm="syz.2.5052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 459.929017][T23361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5053'. [ 459.977949][T23347] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 459.997798][T23347] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.050184][T23235] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 460.098827][T23361] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.099052][T23361] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.204393][T23361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.296820][T23373] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5058'. [ 460.422052][T23376] team0 (unregistering): Failed to send options change via netlink (err -105) [ 460.424572][ T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.424705][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.424759][ T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.424798][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.424961][ T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.425004][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.425063][ T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.425291][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.767368][T23384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.776633][T23384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.098705][T23392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5064'. [ 461.098769][T23392] FAULT_INJECTION: forcing a failure. [ 461.098769][T23392] name failslab, interval 1, probability 0, space 0, times 0 [ 461.098879][T23392] CPU: 1 UID: 0 PID: 23392 Comm: syz.1.5064 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 461.098923][T23392] Tainted: [W]=WARN [ 461.098935][T23392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 461.098954][T23392] Call Trace: [ 461.098963][T23392] [ 461.098974][T23392] __dump_stack+0x1d/0x30 [ 461.099053][T23392] dump_stack_lvl+0x95/0xd0 [ 461.099135][T23392] dump_stack+0x15/0x1b [ 461.099165][T23392] should_fail_ex+0x259/0x270 [ 461.099337][T23392] ? security_inode_alloc+0x37/0x100 [ 461.099368][T23392] should_failslab+0x8c/0xb0 [ 461.099474][T23392] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 461.099521][T23392] ? security_inode_alloc+0x37/0x100 [ 461.099633][T23392] security_inode_alloc+0x37/0x100 [ 461.099665][T23392] inode_init_always_gfp+0x49b/0x4e0 [ 461.099728][T23392] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 461.099767][T23392] alloc_inode+0x58/0x170 [ 461.099799][T23392] new_inode+0x1d/0xe0 [ 461.099911][T23392] __debugfs_create_file+0x97/0x2b0 [ 461.099942][T23392] debugfs_create_file_full+0x3f/0x60 [ 461.100023][T23392] ? __pfx_ipvlan_link_setup+0x10/0x10 [ 461.100053][T23392] ref_tracker_dir_debugfs+0x10e/0x1e0 [ 461.100185][T23392] alloc_netdev_mqs+0x1a9/0xa50 [ 461.100212][T23392] rtnl_create_link+0x239/0x720 [ 461.100238][T23392] rtnl_newlink_create+0x17a/0x4a0 [ 461.100276][T23392] ? security_capable+0x7b/0x90 [ 461.100352][T23392] ? netlink_ns_capable+0x86/0xa0 [ 461.100400][T23392] rtnl_newlink+0x1255/0x1510 [ 461.100496][T23392] ? __memcg_slab_free_hook+0x154/0x340 [ 461.100526][T23392] ? __rcu_read_unlock+0x4e/0x70 [ 461.100564][T23392] ? avc_has_perm_noaudit+0xac/0x160 [ 461.100658][T23392] ? cred_has_capability+0x224/0x2a0 [ 461.100696][T23392] ? selinux_capable+0x31/0x40 [ 461.100873][T23392] ? security_capable+0x7b/0x90 [ 461.100899][T23392] ? ns_capable+0x80/0xb0 [ 461.100931][T23392] ? __pfx_rtnl_newlink+0x10/0x10 [ 461.100974][T23392] rtnetlink_rcv_msg+0x64b/0x720 [ 461.101033][T23392] netlink_rcv_skb+0x11e/0x220 [ 461.101079][T23392] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 461.101117][T23392] rtnetlink_rcv+0x1c/0x30 [ 461.101161][T23392] netlink_unicast+0x665/0x740 [ 461.101213][T23392] netlink_sendmsg+0x5ef/0x740 [ 461.101296][T23392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.101326][T23392] ____sys_sendmsg+0x54a/0x590 [ 461.101362][T23392] ___sys_sendmsg+0x195/0x1e0 [ 461.101420][T23392] __x64_sys_sendmsg+0xd4/0x160 [ 461.101457][T23392] x64_sys_call+0x22ab/0x2550 [ 461.101496][T23392] do_syscall_64+0x112/0x360 [ 461.101533][T23392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.101589][T23392] RIP: 0033:0x7f7f80d3fb19 [ 461.101636][T23392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.101666][T23392] RSP: 002b:00007f7f7f797028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.101697][T23392] RAX: ffffffffffffffda RBX: 00007f7f80fc5fa0 RCX: 00007f7f80d3fb19 [ 461.101775][T23392] RDX: 0000000000004054 RSI: 0000200000001a80 RDI: 0000000000000005 [ 461.101795][T23392] RBP: 00007f7f80dd7b70 R08: 0000000000000000 R09: 0000000000000000 [ 461.101823][T23392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.101838][T23392] R13: 00007f7f80fc6038 R14: 00007f7f80fc5fa0 R15: 00007fffa11cc958 [ 461.101859][T23392] [ 461.150825][ T29] audit: type=1400 audit(1793810972.111:2983): avc: denied { remount } for pid=23393 comm="syz.5.5065" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 461.224009][T23392] debugfs: out of free dentries, can not create file 'netdev@ffff88813818e600' [ 461.652478][T23403] pim6reg: entered allmulticast mode [ 461.666676][T23403] pim6reg: left allmulticast mode [ 461.903600][T23413] loop9: detected capacity change from 0 to 128 [ 461.915681][T23413] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 461.917108][T23413] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.988709][T23415] loop2: detected capacity change from 0 to 128 [ 461.989205][T23415] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000000' [ 462.117207][T19384] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 462.415649][T23430] loop2: detected capacity change from 0 to 512 [ 462.428939][T23430] EXT4-fs (loop2): 1 truncate cleaned up [ 462.429477][T23430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.759428][T19900] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.027870][T23441] loop2: detected capacity change from 0 to 512 [ 463.167777][T23444] loop5: detected capacity change from 0 to 128 [ 463.180658][T23444] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 463.180861][T23444] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.220257][ T29] audit: type=1400 audit(1793810974.181:2984): avc: denied { write } for pid=23443 comm="syz.5.5085" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 463.831758][T21322] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 464.033482][T23458] FAULT_INJECTION: forcing a failure. [ 464.033482][T23458] name failslab, interval 1, probability 0, space 0, times 0 [ 464.033524][T23458] CPU: 0 UID: 0 PID: 23458 Comm: syz.5.5089 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 464.033558][T23458] Tainted: [W]=WARN [ 464.033568][T23458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 464.033588][T23458] Call Trace: [ 464.033598][T23458] [ 464.033609][T23458] __dump_stack+0x1d/0x30 [ 464.033685][T23458] dump_stack_lvl+0x95/0xd0 [ 464.033780][T23458] dump_stack+0x15/0x1b [ 464.033804][T23458] should_fail_ex+0x259/0x270 [ 464.033856][T23458] ? udpv6_init_sock+0xfa/0x1f0 [ 464.033950][T23458] should_failslab+0x8c/0xb0 [ 464.033987][T23458] __kmalloc_noprof+0xb6/0x4b0 [ 464.034137][T23458] ? ___sys_sendmsg+0x195/0x1e0 [ 464.034159][T23458] ? udpv6_init_sock+0xfa/0x1f0 [ 464.034209][T23458] udpv6_init_sock+0xfa/0x1f0 [ 464.034307][T23458] inet6_create+0x7f2/0x860 [ 464.034362][T23458] __sock_create+0x2e5/0x580 [ 464.034394][T23458] sock_create_kern+0x38/0x50 [ 464.034432][T23458] udp_sock_create6+0x68/0x3f0 [ 464.034477][T23458] rxe_net_init+0x24a/0x460 [ 464.034580][T23458] rxe_newlink+0xbc/0x1a0 [ 464.034651][T23458] nldev_newlink+0x3a8/0x430 [ 464.034817][T23458] ? __pfx_nldev_newlink+0x10/0x10 [ 464.034908][T23458] rdma_nl_rcv+0x439/0x570 [ 464.034951][T23458] ? selinux_nlmsg_lookup+0x9b/0x870 [ 464.035030][T23458] netlink_unicast+0x665/0x740 [ 464.035070][T23458] netlink_sendmsg+0x5ef/0x740 [ 464.035123][T23458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.035157][T23458] ____sys_sendmsg+0x54a/0x590 [ 464.035190][T23458] ___sys_sendmsg+0x195/0x1e0 [ 464.035301][T23458] __x64_sys_sendmsg+0xd4/0x160 [ 464.035330][T23458] x64_sys_call+0x22ab/0x2550 [ 464.035386][T23458] do_syscall_64+0x112/0x360 [ 464.035451][T23458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.035477][T23458] RIP: 0033:0x7f725f7ffb19 [ 464.035495][T23458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.035516][T23458] RSP: 002b:00007f725e24f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.035616][T23458] RAX: ffffffffffffffda RBX: 00007f725fa85fa0 RCX: 00007f725f7ffb19 [ 464.035638][T23458] RDX: 0000000000000010 RSI: 00002000000006c0 RDI: 0000000000000004 [ 464.035659][T23458] RBP: 00007f725f897b70 R08: 0000000000000000 R09: 0000000000000000 [ 464.035680][T23458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.035699][T23458] R13: 00007f725fa86038 R14: 00007f725fa85fa0 R15: 00007ffce4f2c838 [ 464.035759][T23458] [ 464.038600][T23458] rdma_rxe: Failed to create IPv6 UDP tunnel [ 464.090151][T23454] loop2: detected capacity change from 0 to 512 [ 464.095904][T23454] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 464.262270][T23454] md: superblock version -2 not known [ 464.262320][T23454] md: couldn't set array info. -22 [ 464.412618][T23462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5092'. [ 464.412641][T23462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5092'. [ 464.837653][T23464] loop2: detected capacity change from 0 to 256 [ 465.587457][T23475] tipc: Enabled bearer , priority 0 [ 465.697598][T23475] syzkaller0: entered promiscuous mode [ 465.697628][T23475] syzkaller0: entered allmulticast mode [ 465.699374][T23475] tipc: Resetting bearer [ 465.783031][T23474] tipc: Resetting bearer [ 465.816042][T23474] tipc: Disabling bearer [ 474.769189][T23479] rxe_eth0 speed is unknown, defaulting to 1000 [ 474.991497][T23479] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.991530][T23479] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.991660][T23479] bridge_slave_0: entered allmulticast mode [ 474.992406][T23479] bridge_slave_0: entered promiscuous mode [ 474.998470][T23479] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.998575][T23479] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.998864][T23479] bridge_slave_1: entered allmulticast mode [ 475.001608][T23479] bridge_slave_1: entered promiscuous mode [ 475.051792][T23479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.055718][T23479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.088113][T23479] team0: Port device team_slave_0 added [ 475.089062][T23479] team0: Port device team_slave_1 added [ 475.106178][T23479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.106197][T23479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.106229][T23479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.106915][T23479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.106928][T23479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.106966][T23479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.141356][T23479] hsr_slave_0: entered promiscuous mode [ 475.142468][T23479] hsr_slave_1: entered promiscuous mode [ 475.143409][T23479] debugfs: 'hsr0' already exists in 'hsr' [ 475.143451][T23479] Cannot create hsr debugfs directory [ 475.259317][T23488] FAULT_INJECTION: forcing a failure. [ 475.259317][T23488] name failslab, interval 1, probability 0, space 0, times 0 [ 475.259358][T23488] CPU: 0 UID: 0 PID: 23488 Comm: syz.2.5102 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 475.259391][T23488] Tainted: [W]=WARN [ 475.259399][T23488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 475.259417][T23488] Call Trace: [ 475.259424][T23488] [ 475.259432][T23488] __dump_stack+0x1d/0x30 [ 475.259535][T23488] dump_stack_lvl+0x95/0xd0 [ 475.259562][T23488] dump_stack+0x15/0x1b [ 475.259607][T23488] should_fail_ex+0x259/0x270 [ 475.259645][T23488] should_failslab+0x8c/0xb0 [ 475.259770][T23488] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 475.259819][T23488] ? sock_alloc_inode+0x36/0xf0 [ 475.259858][T23488] ? sock_alloc_inode+0x36/0xf0 [ 475.259926][T23488] ? selinux_socket_create+0x86/0x180 [ 475.260040][T23488] ? __pfx_sock_alloc_inode+0x10/0x10 [ 475.260082][T23488] sock_alloc_inode+0x36/0xf0 [ 475.260116][T23488] alloc_inode+0x40/0x170 [ 475.260140][T23488] __sock_create+0x121/0x580 [ 475.260200][T23488] ? __sock_create+0x4eb/0x580 [ 475.260302][T23488] sock_create_kern+0x38/0x50 [ 475.260415][T23488] inet_ctl_sock_create+0x58/0x130 [ 475.260494][T23488] igmp6_net_init+0x37/0x260 [ 475.260539][T23488] ops_init+0x22a/0x2e0 [ 475.260588][T23488] setup_net+0x9f/0x230 [ 475.260647][T23488] copy_net_ns+0x339/0x490 [ 475.260687][T23488] create_new_namespaces+0x1f6/0x420 [ 475.260734][T23488] unshare_nsproxy_namespaces+0x115/0x150 [ 475.260767][T23488] ksys_unshare+0x3a3/0x690 [ 475.260868][T23488] __x64_sys_unshare+0x1f/0x30 [ 475.260949][T23488] x64_sys_call+0x1e33/0x2550 [ 475.260978][T23488] do_syscall_64+0x112/0x360 [ 475.261048][T23488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.261080][T23488] RIP: 0033:0x7f3cbd41fb19 [ 475.261098][T23488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.261118][T23488] RSP: 002b:00007f3cbbe77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 475.261140][T23488] RAX: ffffffffffffffda RBX: 00007f3cbd6a5fa0 RCX: 00007f3cbd41fb19 [ 475.261222][T23488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 475.261239][T23488] RBP: 00007f3cbd4b7b70 R08: 0000000000000000 R09: 0000000000000000 [ 475.261258][T23488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.261277][T23488] R13: 00007f3cbd6a6038 R14: 00007f3cbd6a5fa0 R15: 00007ffc4a58d5f8 [ 475.261306][T23488] [ 475.266689][T23488] socket: no more sockets [ 475.266719][T23488] Failed to initialize the IGMP6 control socket (err -23) [ 475.559938][T23492] loop2: detected capacity change from 0 to 512 [ 475.746846][T23479] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 475.754537][T23479] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 475.758358][T23479] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 475.772642][T23479] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 475.780304][T23479] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 475.792789][T23479] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 475.797315][T23479] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 475.805001][T23496] loop2: detected capacity change from 0 to 512 [ 475.812365][T23479] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 475.920576][T23479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.924319][T23496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.924536][T23496] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.963584][T23479] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.971627][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.971784][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.992419][ T29] audit: type=1400 audit(1793810986.951:2985): avc: denied { write } for pid=23495 comm="syz.2.5106" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 475.996266][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.996391][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.011286][ T29] audit: type=1400 audit(1793810986.971:2986): avc: denied { write } for pid=23495 comm="syz.2.5106" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 476.011397][ T29] audit: type=1400 audit(1793810986.971:2987): avc: denied { write } for pid=23495 comm="syz.2.5106" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 476.105192][T19900] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.144102][T23479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.179554][T23479] veth0_vlan: entered promiscuous mode [ 476.187475][T23479] veth1_vlan: entered promiscuous mode [ 476.226307][T23479] veth0_macvtap: entered promiscuous mode [ 476.231835][T23479] veth1_macvtap: entered promiscuous mode [ 476.264258][T23479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.276818][T23479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.314289][T23513] FAULT_INJECTION: forcing a failure. [ 476.314289][T23513] name failslab, interval 1, probability 0, space 0, times 0 [ 476.314323][T23513] CPU: 0 UID: 0 PID: 23513 Comm: syz.5.5110 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 476.314359][T23513] Tainted: [W]=WARN [ 476.314369][T23513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 476.314454][T23513] Call Trace: [ 476.314463][T23513] [ 476.314471][T23513] __dump_stack+0x1d/0x30 [ 476.314506][T23513] dump_stack_lvl+0x95/0xd0 [ 476.314531][T23513] dump_stack+0x15/0x1b [ 476.314557][T23513] should_fail_ex+0x259/0x270 [ 476.314646][T23513] ? asymmetric_key_generate_id+0x63/0x140 [ 476.314695][T23513] should_failslab+0x8c/0xb0 [ 476.314744][T23513] __kmalloc_noprof+0xb6/0x4b0 [ 476.314831][T23513] ? asymmetric_key_generate_id+0x63/0x140 [ 476.314877][T23513] asymmetric_key_generate_id+0x63/0x140 [ 476.314991][T23513] ? x509_note_OID+0x8a/0xc0 [ 476.315019][T23513] x509_note_issuer+0xa0/0x110 [ 476.315070][T23513] asn1_ber_decoder+0x11db/0x1490 [ 476.315118][T23513] ? __kmalloc_cache_noprof+0x17e/0x3e0 [ 476.315162][T23513] x509_cert_parse+0x11b/0x450 [ 476.315260][T23513] x509_key_preparse+0x3c/0x420 [ 476.315284][T23513] ? selinux_key_permission+0x161/0x190 [ 476.315368][T23513] asymmetric_key_preparse+0x68/0xb0 [ 476.315442][T23513] __key_create_or_update+0x29e/0x820 [ 476.315486][T23513] ? key_task_permission+0x2ac/0x2c0 [ 476.315523][T23513] key_create_or_update+0x42/0x60 [ 476.315636][T23513] __se_sys_add_key+0x2a5/0x360 [ 476.315664][T23513] __x64_sys_add_key+0x67/0x80 [ 476.315686][T23513] x64_sys_call+0x1fa9/0x2550 [ 476.315770][T23513] do_syscall_64+0x112/0x360 [ 476.315822][T23513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.315848][T23513] RIP: 0033:0x7f725f7ffb19 [ 476.315865][T23513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.316009][T23513] RSP: 002b:00007f725e24f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 476.316040][T23513] RAX: ffffffffffffffda RBX: 00007f725fa85fa0 RCX: 00007f725f7ffb19 [ 476.316062][T23513] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 476.316231][T23513] RBP: 00007f725f897b70 R08: ffffffffffffffff R09: 0000000000000000 [ 476.316247][T23513] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 476.316266][T23513] R13: 00007f725fa86038 R14: 00007f725fa85fa0 R15: 00007ffce4f2c838 [ 476.316296][T23513] [ 476.365244][ T403] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.375717][ T403] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.375940][ T403] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.376054][ T403] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.877799][T23524] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 conventional PCI endpoint [ 476.926326][T23524] pci 0000:00:05.0: BAR 0 [mem 0xfe000000-0xfe7fffff] [ 476.926839][T23524] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 476.928814][T23524] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 476.928858][T23524] pci 0000:00:05.0: vgaarb: bridge control possible [ 476.928873][T23524] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 476.929762][T23524] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 477.171183][T23536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5119'. [ 477.197069][T23533] rxe_eth0 speed is unknown, defaulting to 1000 [ 477.224556][T23536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5119'. [ 477.244361][T23531] loop7: detected capacity change from 0 to 512 [ 477.261729][T23531] EXT4-fs: Ignoring removed bh option [ 477.387805][T23531] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.389708][T23531] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.449642][T23479] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.515714][T23549] FAULT_INJECTION: forcing a failure. [ 477.515714][T23549] name failslab, interval 1, probability 0, space 0, times 0 [ 477.515771][T23549] CPU: 1 UID: 0 PID: 23549 Comm: syz.7.5124 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 477.515815][T23549] Tainted: [W]=WARN [ 477.515826][T23549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 477.515991][T23549] Call Trace: [ 477.516001][T23549] [ 477.516119][T23549] __dump_stack+0x1d/0x30 [ 477.516170][T23549] dump_stack_lvl+0x95/0xd0 [ 477.516202][T23549] dump_stack+0x15/0x1b [ 477.516262][T23549] should_fail_ex+0x259/0x270 [ 477.516311][T23549] ? __igmp_group_dropped+0x50d/0xa20 [ 477.516344][T23549] should_failslab+0x8c/0xb0 [ 477.516380][T23549] __kmalloc_cache_noprof+0x5d/0x3e0 [ 477.516429][T23549] ? __igmp_group_dropped+0x50d/0xa20 [ 477.516535][T23549] __igmp_group_dropped+0x50d/0xa20 [ 477.516562][T23549] __ip_mc_dec_group+0x196/0x3d0 [ 477.516659][T23549] ip_mc_leave_group+0x2bb/0x310 [ 477.516697][T23549] ip_mc_msfilter+0x307/0x590 [ 477.516736][T23549] ? _copy_from_user+0x89/0xb0 [ 477.516838][T23549] ? copy_from_sockptr+0x5e/0x90 [ 477.516881][T23549] do_ip_setsockopt+0x21f9/0x22f0 [ 477.516940][T23549] ip_setsockopt+0x58/0x110 [ 477.517020][T23549] udp_setsockopt+0x89/0xa0 [ 477.517071][T23549] sock_common_setsockopt+0x69/0x80 [ 477.517117][T23549] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 477.517156][T23549] __sys_setsockopt+0x184/0x200 [ 477.517187][T23549] __x64_sys_setsockopt+0x64/0x80 [ 477.517217][T23549] x64_sys_call+0x248f/0x2550 [ 477.517267][T23549] do_syscall_64+0x112/0x360 [ 477.517353][T23549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.517454][T23549] RIP: 0033:0x7f83c114fb19 [ 477.517480][T23549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.517500][T23549] RSP: 002b:00007f83bfb9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 477.517528][T23549] RAX: ffffffffffffffda RBX: 00007f83c13d5fa0 RCX: 00007f83c114fb19 [ 477.517584][T23549] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000003 [ 477.517604][T23549] RBP: 00007f83c11e7b70 R08: 0000000000000057 R09: 0000000000000000 [ 477.517624][T23549] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 477.517645][T23549] R13: 00007f83c13d6038 R14: 00007f83c13d5fa0 R15: 00007ffcf8826af8 [ 477.517692][T23549] [ 477.734121][T23533] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.734237][T23533] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.734517][T23533] bridge_slave_0: entered allmulticast mode [ 477.737622][T23533] bridge_slave_0: entered promiscuous mode [ 477.745509][T23533] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.745612][T23533] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.745914][T23533] bridge_slave_1: entered allmulticast mode [ 477.748330][T23533] bridge_slave_1: entered promiscuous mode [ 477.842613][T23533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.843887][T23533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.878650][T23533] team0: Port device team_slave_0 added [ 477.880223][T23533] team0: Port device team_slave_1 added [ 477.914935][T23533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.914951][T23533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.915050][T23533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.915670][T23533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.915682][T23533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.915790][T23533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.040141][T23533] hsr_slave_0: entered promiscuous mode [ 478.040708][T23533] hsr_slave_1: entered promiscuous mode [ 478.040993][T23533] debugfs: 'hsr0' already exists in 'hsr' [ 478.041006][T23533] Cannot create hsr debugfs directory [ 478.230537][T23578] tipc: Started in network mode [ 478.230649][T23578] tipc: Node identity b63595a9cbce, cluster identity 4711 [ 478.230787][T23578] tipc: Enabled bearer , priority 0 [ 478.278317][T23578] syzkaller0: entered promiscuous mode [ 478.278339][T23578] syzkaller0: entered allmulticast mode [ 478.278999][T23578] tipc: Resetting bearer [ 478.279090][T23574] rxe_eth0 speed is unknown, defaulting to 1000 [ 478.348920][T23584] loop2: detected capacity change from 0 to 128 [ 478.360309][T23584] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 478.362600][T23584] ext4 filesystem being mounted at /328/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 478.409616][T23577] tipc: Resetting bearer [ 478.426320][ T29] audit: type=1400 audit(1793810989.391:2988): avc: denied { write } for pid=23583 comm="syz.2.5141" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 478.428022][T23577] tipc: Disabling bearer [ 478.479873][T19900] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 478.530796][T23592] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 478.569643][ T29] audit: type=1400 audit(1793810989.531:2989): avc: denied { setopt } for pid=23595 comm="syz.2.5146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 478.594714][T23574] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.594768][T23574] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.594849][T23574] bridge_slave_0: entered allmulticast mode [ 478.595394][T23574] bridge_slave_0: entered promiscuous mode [ 478.597272][T23574] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.597374][T23574] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.597632][T23574] bridge_slave_1: entered allmulticast mode [ 478.598854][T23574] bridge_slave_1: entered promiscuous mode [ 478.622668][T23574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.624999][T23574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.648326][T23574] team0: Port device team_slave_0 added [ 478.651315][T23574] team0: Port device team_slave_1 added [ 478.688888][T23574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.688908][T23574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.688945][T23574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.689601][T23574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.689618][T23574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.689648][T23574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.700991][T23604] syz_tun: entered allmulticast mode [ 478.762571][T23574] hsr_slave_0: entered promiscuous mode [ 478.765477][T23574] hsr_slave_1: entered promiscuous mode [ 478.769368][T23574] debugfs: 'hsr0' already exists in 'hsr' [ 478.769419][T23574] Cannot create hsr debugfs directory [ 478.865461][T23574] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.905393][T23574] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.954205][T23574] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.994458][T23574] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.394060][T23613] netlink: 'syz.5.5150': attribute type 1 has an invalid length. [ 479.399545][T23613] 8021q: adding VLAN 0 to HW filter on device bond3 [ 479.424492][T23613] bond3: (slave geneve3): making interface the new active one [ 479.425570][T23613] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 479.447719][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.448833][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.448879][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.448933][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.587017][T23617] syzkaller0: entered promiscuous mode [ 479.587041][T23617] syzkaller0: entered allmulticast mode [ 479.749533][T23619] loop7: detected capacity change from 0 to 8192 [ 479.793586][T23621] loop7: detected capacity change from 0 to 1024 [ 479.798585][T23621] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 479.801151][ T29] audit: type=1400 audit(1793810990.761:2990): avc: denied { mounton } for pid=23620 comm="syz.7.5153" path="/13/mnt/file1" dev="sda1" ino=2122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 479.815195][T23621] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #3: block 2: comm syz.7.5153: lblock 2 mapped to illegal pblock 2 (length 1) [ 479.815375][T23621] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 479.815815][T23621] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 479.815880][T23621] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #3: block 48: comm syz.7.5153: lblock 0 mapped to illegal pblock 48 (length 1) [ 479.815911][T23621] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 479.816208][T23621] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 479.816270][T23621] EXT4-fs error (device loop7): ext4_acquire_dquot:7120: comm syz.7.5153: Failed to acquire dquot type 0 [ 479.816373][T23621] loop7: lost filesystem error report for type 5 error -117 [ 479.816736][T23621] EXT4-fs error (device loop7) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 479.816814][T23621] loop7: lost filesystem error report for type 5 error -117 [ 479.817644][T23621] EXT4-fs error (device loop7): ext4_evict_inode:336: inode #11: comm syz.7.5153: mark_inode_dirty error [ 479.817798][T23621] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 479.819546][T23621] EXT4-fs warning (device loop7): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 479.819745][T23621] EXT4-fs (loop7): 1 orphan inode deleted [ 479.826277][T23621] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.835944][ T75] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 479.836418][ T75] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 479.836518][ T75] EXT4-fs error (device loop7): ext4_release_dquot:7156: comm kworker/u8:5: Failed to release dquot type 0 [ 479.839328][T23621] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.844998][T23621] EXT4-fs error (device loop7): __ext4_get_inode_loc:5733: comm syz.7.5153: Invalid inode table block 1 in block_group 0 [ 479.845143][T23621] loop7: lost filesystem error report for type 5 error -117 [ 479.845442][T23621] EXT4-fs error (device loop7) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 479.845545][T23621] loop7: lost filesystem error report for type 5 error -117 [ 479.845953][T23621] EXT4-fs error (device loop7): ext4_quota_off:7404: inode #3: comm syz.7.5153: mark_inode_dirty error [ 479.846033][T23621] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 479.848131][T23621] EXT4-fs error (device loop7): __ext4_get_inode_loc:5733: comm syz.7.5153: Invalid inode table block 1 in block_group 0 [ 479.848231][T23621] loop7: lost filesystem error report for type 5 error -117 [ 479.889781][ T29] audit: type=1400 audit(1793810990.851:2991): avc: denied { create } for pid=23620 comm="syz.7.5153" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 480.005348][T23625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.007985][T23625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.632634][T23627] loop7: detected capacity change from 0 to 512 [ 480.657777][T23627] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.658034][T23627] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.689827][T23479] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.758692][T23634] FAULT_INJECTION: forcing a failure. [ 480.758692][T23634] name failslab, interval 1, probability 0, space 0, times 0 [ 480.758722][T23634] CPU: 1 UID: 0 PID: 23634 Comm: syz.7.5157 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 480.758752][T23634] Tainted: [W]=WARN [ 480.758759][T23634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 480.758848][T23634] Call Trace: [ 480.758855][T23634] [ 480.758862][T23634] __dump_stack+0x1d/0x30 [ 480.758891][T23634] dump_stack_lvl+0x95/0xd0 [ 480.758914][T23634] dump_stack+0x15/0x1b [ 480.758986][T23634] should_fail_ex+0x259/0x270 [ 480.759034][T23634] ? alloc_pipe_info+0xad/0x340 [ 480.759067][T23634] should_failslab+0x8c/0xb0 [ 480.759113][T23634] __kmalloc_cache_noprof+0x5d/0x3e0 [ 480.759146][T23634] ? avc_has_perm_noaudit+0xac/0x160 [ 480.759217][T23634] ? alloc_pipe_info+0xad/0x340 [ 480.759252][T23634] alloc_pipe_info+0xad/0x340 [ 480.759333][T23634] splice_direct_to_actor+0x58f/0x680 [ 480.759355][T23634] ? __file_has_perm+0x3d9/0x430 [ 480.759450][T23634] ? __pfx_direct_splice_actor+0x10/0x10 [ 480.759543][T23634] do_splice_direct+0x119/0x1a0 [ 480.759564][T23634] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 480.759636][T23634] do_sendfile+0x37d/0x640 [ 480.759662][T23634] __x64_sys_sendfile64+0x105/0x150 [ 480.759685][T23634] x64_sys_call+0x1015/0x2550 [ 480.759711][T23634] do_syscall_64+0x112/0x360 [ 480.759794][T23634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.759816][T23634] RIP: 0033:0x7f83c114fb19 [ 480.759831][T23634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.759849][T23634] RSP: 002b:00007f83bfb9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 480.759899][T23634] RAX: ffffffffffffffda RBX: 00007f83c13d5fa0 RCX: 00007f83c114fb19 [ 480.759913][T23634] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 480.759925][T23634] RBP: 00007f83c11e7b70 R08: 0000000000000000 R09: 0000000000000000 [ 480.759938][T23634] R10: 000000008010002b R11: 0000000000000246 R12: 0000000000000000 [ 480.759951][T23634] R13: 00007f83c13d6038 R14: 00007f83c13d5fa0 R15: 00007ffcf8826af8 [ 480.760039][T23634] [ 481.103068][T23644] loop7: detected capacity change from 0 to 512 [ 481.110319][T23644] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 481.110337][T23644] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 481.110415][T23644] EXT4-fs (loop7): orphan cleanup on readonly fs [ 481.111977][T23644] EXT4-fs error (device loop7): ext4_orphan_get:1404: inode #13: comm syz.7.5161: iget: bad i_size value: 12154761577498 [ 481.112060][T23644] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 481.114113][T23644] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.5161: couldn't read orphan inode 13 (err -117) [ 481.114205][T23644] loop7: lost filesystem error report for type 5 error -117 [ 481.115305][T23644] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 481.154034][T23644] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.5161: dx entry: limit 65535 != root limit 120 [ 481.154217][T23644] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5161: Corrupt directory, running e2fsck is recommended [ 481.154952][T23644] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.5161: dx entry: limit 65535 != root limit 120 [ 481.155117][T23644] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5161: Corrupt directory, running e2fsck is recommended [ 481.156102][T23644] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.5161: dx entry: limit 65535 != root limit 120 [ 481.156195][T23644] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5161: Corrupt directory, running e2fsck is recommended [ 481.157028][T23644] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 481.157048][T23644] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 481.169314][T23644] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.5161: dx entry: limit 65535 != root limit 120 [ 481.169354][T23644] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5161: Corrupt directory, running e2fsck is recommended [ 481.170119][T23644] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.5161: dx entry: limit 65535 != root limit 120 [ 481.170212][T23644] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5161: Corrupt directory, running e2fsck is recommended [ 481.218350][T23479] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.443819][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 481.443839][ T29] audit: type=1400 audit(1793810992.411:2994): avc: denied { create } for pid=23654 comm="syz.7.5165" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 481.548798][T23596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 481.550152][T23533] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 481.569562][T23533] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 481.569887][T23574] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 481.588172][T23574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 481.598660][T23574] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 481.614549][T23574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 481.614998][T23533] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 481.636967][T23533] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 481.637263][T23574] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 481.643425][T23574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 481.643885][T23574] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 481.653188][T23574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 481.675720][T23533] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 481.688877][T23533] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 481.689333][T23533] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 481.732108][T23533] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 481.792945][T23679] FAULT_INJECTION: forcing a failure. [ 481.792945][T23679] name failslab, interval 1, probability 0, space 0, times 0 [ 481.792988][T23679] CPU: 0 UID: 0 PID: 23679 Comm: syz.7.5171 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 481.793030][T23679] Tainted: [W]=WARN [ 481.793040][T23679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 481.793082][T23679] Call Trace: [ 481.793092][T23679] [ 481.793102][T23679] __dump_stack+0x1d/0x30 [ 481.793139][T23679] dump_stack_lvl+0x95/0xd0 [ 481.793184][T23679] dump_stack+0x15/0x1b [ 481.793214][T23679] should_fail_ex+0x259/0x270 [ 481.793252][T23679] ? shmem_symlink+0x16a/0x400 [ 481.793345][T23679] should_failslab+0x8c/0xb0 [ 481.793442][T23679] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 481.793495][T23679] ? shmem_symlink+0x16a/0x400 [ 481.793595][T23679] kmemdup_noprof+0x2b/0x70 [ 481.793651][T23679] shmem_symlink+0x16a/0x400 [ 481.793678][T23679] vfs_symlink+0x100/0x230 [ 481.793709][T23679] filename_symlinkat+0xe8/0x2c0 [ 481.793754][T23679] __se_sys_symlinkat+0x43/0x1b0 [ 481.793897][T23679] __x64_sys_symlinkat+0x43/0x50 [ 481.793997][T23679] x64_sys_call+0x1cf4/0x2550 [ 481.794036][T23679] do_syscall_64+0x112/0x360 [ 481.794151][T23679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.794243][T23679] RIP: 0033:0x7f83c114fb19 [ 481.794266][T23679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.794295][T23679] RSP: 002b:00007f83bfb9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 481.794356][T23679] RAX: ffffffffffffffda RBX: 00007f83c13d5fa0 RCX: 00007f83c114fb19 [ 481.794378][T23679] RDX: 0000200000000300 RSI: ffffffffffffff9c RDI: 0000200000000280 [ 481.794398][T23679] RBP: 00007f83c11e7b70 R08: 0000000000000000 R09: 0000000000000000 [ 481.794418][T23679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.794484][T23679] R13: 00007f83c13d6038 R14: 00007f83c13d5fa0 R15: 00007ffcf8826af8 [ 481.794539][T23679] [ 481.906568][T23574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.925506][T23681] loop5: detected capacity change from 0 to 512 [ 482.005149][T23574] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.016429][T23681] EXT4-fs error (device loop5): ext4_xattr_inode_iget:473: comm syz.5.5170: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 482.016623][T23681] loop5: lost filesystem error report for type 5 error -117 [ 482.018779][T23681] EXT4-fs (loop5): 1 orphan inode deleted [ 482.026348][T23681] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.045327][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.045466][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.060647][T23533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.077461][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.077556][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.093859][T23683] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5172'. [ 482.093931][T23683] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5172'. [ 482.125310][T23533] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.139996][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.140038][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.157813][T15393] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.157855][T15393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.246467][T23574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.271917][T23693] FAULT_INJECTION: forcing a failure. [ 482.271917][T23693] name failslab, interval 1, probability 0, space 0, times 0 [ 482.271950][T23693] CPU: 0 UID: 0 PID: 23693 Comm: syz.7.5176 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 482.272020][T23693] Tainted: [W]=WARN [ 482.272030][T23693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 482.272049][T23693] Call Trace: [ 482.272058][T23693] [ 482.272069][T23693] __dump_stack+0x1d/0x30 [ 482.272103][T23693] dump_stack_lvl+0x95/0xd0 [ 482.272127][T23693] dump_stack+0x15/0x1b [ 482.272186][T23693] should_fail_ex+0x259/0x270 [ 482.272226][T23693] ? ops_init+0x4b/0x2e0 [ 482.272343][T23693] should_failslab+0x8c/0xb0 [ 482.272446][T23693] __kmalloc_noprof+0xb6/0x4b0 [ 482.272487][T23693] ? ops_init+0x4b/0x2e0 [ 482.272519][T23693] ops_init+0x4b/0x2e0 [ 482.272555][T23693] setup_net+0x9f/0x230 [ 482.272695][T23693] copy_net_ns+0x339/0x490 [ 482.272740][T23693] create_new_namespaces+0x1f6/0x420 [ 482.272770][T23693] unshare_nsproxy_namespaces+0x115/0x150 [ 482.272902][T23693] ksys_unshare+0x3a3/0x690 [ 482.272949][T23693] __x64_sys_unshare+0x1f/0x30 [ 482.272987][T23693] x64_sys_call+0x1e33/0x2550 [ 482.273026][T23693] do_syscall_64+0x112/0x360 [ 482.273173][T23693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.273207][T23693] RIP: 0033:0x7f83c114fb19 [ 482.273230][T23693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.273259][T23693] RSP: 002b:00007f83bfb9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 482.273303][T23693] RAX: ffffffffffffffda RBX: 00007f83c13d5fa0 RCX: 00007f83c114fb19 [ 482.273319][T23693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 482.273334][T23693] RBP: 00007f83c11e7b70 R08: 0000000000000000 R09: 0000000000000000 [ 482.273353][T23693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.273425][T23693] R13: 00007f83c13d6038 R14: 00007f83c13d5fa0 R15: 00007ffcf8826af8 [ 482.273447][T23693] [ 482.296666][T21322] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.407718][T23533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.452781][T23574] veth0_vlan: entered promiscuous mode [ 482.464806][T23695] TC_ACT_REPEAT abuse ? [ 482.514260][T23574] veth1_vlan: entered promiscuous mode [ 482.530620][T23533] veth0_vlan: entered promiscuous mode [ 482.550902][T23533] veth1_vlan: entered promiscuous mode [ 482.568450][T23574] veth0_macvtap: entered promiscuous mode [ 482.570908][T23574] veth1_macvtap: entered promiscuous mode [ 482.595327][T23574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.620374][T23533] veth0_macvtap: entered promiscuous mode [ 482.628212][T23533] veth1_macvtap: entered promiscuous mode [ 482.629689][T23574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.648362][T23707] netlink: 'syz.7.5181': attribute type 1 has an invalid length. [ 482.648387][T23707] netlink: 59435 bytes leftover after parsing attributes in process `syz.7.5181'. [ 482.671198][T15389] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.671461][T15389] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.671570][T15389] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.671614][T15389] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.673463][T23533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.678745][T23533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.753212][ T403] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.755485][ T75] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.755566][ T75] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.755606][ T75] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.880045][T23714] FAULT_INJECTION: forcing a failure. [ 482.880045][T23714] name failslab, interval 1, probability 0, space 0, times 0 [ 482.880269][T23714] CPU: 1 UID: 0 PID: 23714 Comm: syz.2.5184 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 482.880315][T23714] Tainted: [W]=WARN [ 482.880326][T23714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 482.880343][T23714] Call Trace: [ 482.880350][T23714] [ 482.880357][T23714] __dump_stack+0x1d/0x30 [ 482.880386][T23714] dump_stack_lvl+0x95/0xd0 [ 482.880471][T23714] dump_stack+0x15/0x1b [ 482.880542][T23714] should_fail_ex+0x259/0x270 [ 482.880639][T23714] ? addrconf_init_net+0xcc/0x450 [ 482.880698][T23714] should_failslab+0x8c/0xb0 [ 482.880743][T23714] __kmalloc_cache_noprof+0x5d/0x3e0 [ 482.880815][T23714] ? addrconf_init_net+0xcc/0x450 [ 482.880866][T23714] addrconf_init_net+0xcc/0x450 [ 482.880919][T23714] ops_init+0x22a/0x2e0 [ 482.880989][T23714] ? setup_net+0xb6/0x230 [ 482.881019][T23714] setup_net+0x9f/0x230 [ 482.881052][T23714] copy_net_ns+0x339/0x490 [ 482.881091][T23714] create_new_namespaces+0x1f6/0x420 [ 482.881156][T23714] unshare_nsproxy_namespaces+0x115/0x150 [ 482.881191][T23714] ksys_unshare+0x3a3/0x690 [ 482.881235][T23714] __x64_sys_unshare+0x1f/0x30 [ 482.881275][T23714] x64_sys_call+0x1e33/0x2550 [ 482.881375][T23714] do_syscall_64+0x112/0x360 [ 482.881424][T23714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.881457][T23714] RIP: 0033:0x7f3cbd41fb19 [ 482.881479][T23714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.881554][T23714] RSP: 002b:00007f3cbbe77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 482.881577][T23714] RAX: ffffffffffffffda RBX: 00007f3cbd6a5fa0 RCX: 00007f3cbd41fb19 [ 482.881592][T23714] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 482.881605][T23714] RBP: 00007f3cbd4b7b70 R08: 0000000000000000 R09: 0000000000000000 [ 482.881646][T23714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.881681][T23714] R13: 00007f3cbd6a6038 R14: 00007f3cbd6a5fa0 R15: 00007ffc4a58d5f8 [ 482.881708][T23714] [ 483.016116][ T29] audit: type=1400 audit(1793810993.981:2995): avc: denied { read write } for pid=23719 comm="syz.8.5115" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 483.016229][ T29] audit: type=1400 audit(1793810993.981:2996): avc: denied { open } for pid=23719 comm="syz.8.5115" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 483.207403][ T29] audit: type=1326 audit(1793810994.171:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23729 comm="syz.8.5189" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996246fb19 code=0x7ffc0000 [ 483.209382][ T29] audit: type=1326 audit(1793810994.171:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23729 comm="syz.8.5189" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996246fb19 code=0x7ffc0000 [ 483.209912][ T29] audit: type=1326 audit(1793810994.171:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23729 comm="syz.8.5189" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996246fb19 code=0x7ffc0000 [ 483.209951][ T29] audit: type=1326 audit(1793810994.171:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23729 comm="syz.8.5189" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996246fb19 code=0x7ffc0000 [ 483.210256][ T29] audit: type=1326 audit(1793810994.171:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23729 comm="syz.8.5189" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f996246fb19 code=0x7ffc0000 [ 483.214449][ T29] audit: type=1326 audit(1793810994.181:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23729 comm="syz.8.5189" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996246fb19 code=0x7ffc0000 [ 483.214513][ T29] audit: type=1326 audit(1793810994.181:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23729 comm="syz.8.5189" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996246fb19 code=0x7ffc0000 [ 483.609668][T23747] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 483.715095][T23751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.715341][T23751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.719820][T23751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.720089][T23751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.830880][T23753] loop6: detected capacity change from 0 to 512 [ 483.838683][T23753] EXT4-fs: Ignoring removed oldalloc option [ 483.860718][T23753] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.860805][T23753] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.903711][T23755] loop7: detected capacity change from 0 to 512 [ 483.938567][T23755] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #4: comm syz.7.5198: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 483.938627][T23755] loop7: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 483.939596][T23574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.940192][T23755] EXT4-fs error (device loop7): ext4_quota_enable:7314: comm syz.7.5198: Bad quota inode: 4, type: 1 [ 483.940285][T23755] loop7: lost filesystem error report for type 5 error -117 [ 483.940809][T23755] EXT4-fs warning (device loop7): ext4_enable_quotas:7355: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 483.941066][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 483.941084][ C0] EXT4-fs (loop7): initial error at time 1793810994: ext4_ext_check_inode:521: inode 4 [ 483.941117][ C0] EXT4-fs (loop7): last error at time 1793810994: ext4_quota_enable:7314 [ 483.953169][T23755] EXT4-fs (loop7): mount failed [ 484.394230][T23783] netlink: 'syz.2.5207': attribute type 2 has an invalid length. [ 484.395107][T23783] FAULT_INJECTION: forcing a failure. [ 484.395107][T23783] name failslab, interval 1, probability 0, space 0, times 0 [ 484.395155][T23783] CPU: 1 UID: 0 PID: 23783 Comm: syz.2.5207 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 484.395192][T23783] Tainted: [W]=WARN [ 484.395201][T23783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 484.395217][T23783] Call Trace: [ 484.395225][T23783] [ 484.395235][T23783] __dump_stack+0x1d/0x30 [ 484.395269][T23783] dump_stack_lvl+0x95/0xd0 [ 484.395322][T23783] dump_stack+0x15/0x1b [ 484.395347][T23783] should_fail_ex+0x259/0x270 [ 484.395405][T23783] ? __kernfs_new_node+0x70/0x440 [ 484.395466][T23783] should_failslab+0x8c/0xb0 [ 484.395509][T23783] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 484.395548][T23783] ? __kernfs_new_node+0x70/0x440 [ 484.395650][T23783] __kernfs_new_node+0x70/0x440 [ 484.395679][T23783] ? __rcu_read_unlock+0x4e/0x70 [ 484.395771][T23783] ? up_write+0x19/0x60 [ 484.395818][T23783] ? kernfs_link_sibling+0x2f5/0x320 [ 484.395846][T23783] ? __rcu_read_unlock+0x4e/0x70 [ 484.395957][T23783] kernfs_new_node+0x107/0x140 [ 484.395986][T23783] __kernfs_create_file+0x4b/0x180 [ 484.396021][T23783] ? __pfx_dev_attr_show+0x10/0x10 [ 484.396116][T23783] ? __pfx_dev_attr_store+0x10/0x10 [ 484.396150][T23783] sysfs_add_file_mode_ns+0x132/0x1b0 [ 484.396202][T23783] internal_create_group+0x43e/0x9e0 [ 484.396229][T23783] ? kernfs_put+0x25e/0x2c0 [ 484.396256][T23783] sysfs_create_groups+0x3f/0xf0 [ 484.396282][T23783] device_add_attrs+0x64/0x3f0 [ 484.396430][T23783] device_add+0x37a/0x790 [ 484.396533][T23783] netdev_register_kobject+0x127/0x240 [ 484.396640][T23783] register_netdevice+0xc68/0x13f0 [ 484.396666][T23783] internal_dev_create+0x185/0x260 [ 484.396698][T23783] ovs_vport_add+0x83/0x150 [ 484.396788][T23783] new_vport+0x1a/0xe0 [ 484.396811][T23783] ovs_dp_cmd_new+0x478/0x720 [ 484.396840][T23783] genl_family_rcv_msg_doit+0x187/0x1f0 [ 484.396881][T23783] genl_rcv_msg+0x42f/0x470 [ 484.396913][T23783] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 484.396992][T23783] netlink_rcv_skb+0x11e/0x220 [ 484.397015][T23783] ? __pfx_genl_rcv_msg+0x10/0x10 [ 484.397053][T23783] genl_rcv+0x28/0x40 [ 484.397088][T23783] netlink_unicast+0x665/0x740 [ 484.397147][T23783] netlink_sendmsg+0x5ef/0x740 [ 484.397176][T23783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.397264][T23783] ____sys_sendmsg+0x54a/0x590 [ 484.397373][T23783] ___sys_sendmsg+0x195/0x1e0 [ 484.397411][T23783] __x64_sys_sendmsg+0xd4/0x160 [ 484.397459][T23783] x64_sys_call+0x22ab/0x2550 [ 484.397492][T23783] do_syscall_64+0x112/0x360 [ 484.397536][T23783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.397563][T23783] RIP: 0033:0x7f3cbd41fb19 [ 484.397584][T23783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.397630][T23783] RSP: 002b:00007f3cbbe77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.397723][T23783] RAX: ffffffffffffffda RBX: 00007f3cbd6a5fa0 RCX: 00007f3cbd41fb19 [ 484.397741][T23783] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 484.397758][T23783] RBP: 00007f3cbd4b7b70 R08: 0000000000000000 R09: 0000000000000000 [ 484.397775][T23783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.397790][T23783] R13: 00007f3cbd6a6038 R14: 00007f3cbd6a5fa0 R15: 00007ffc4a58d5f8 [ 484.397815][T23783] [ 484.650066][T23780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5206'. [ 484.989931][T23791] FAULT_INJECTION: forcing a failure. [ 484.989931][T23791] name failslab, interval 1, probability 0, space 0, times 0 [ 484.989968][T23791] CPU: 1 UID: 0 PID: 23791 Comm: syz.7.5210 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 484.990058][T23791] Tainted: [W]=WARN [ 484.990069][T23791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 484.990090][T23791] Call Trace: [ 484.990099][T23791] [ 484.990111][T23791] __dump_stack+0x1d/0x30 [ 484.990143][T23791] dump_stack_lvl+0x95/0xd0 [ 484.990216][T23791] dump_stack+0x15/0x1b [ 484.990308][T23791] should_fail_ex+0x259/0x270 [ 484.990339][T23791] ? blk_alloc_queue_stats+0x2c/0x90 [ 484.990413][T23791] should_failslab+0x8c/0xb0 [ 484.990452][T23791] __kmalloc_cache_noprof+0x5d/0x3e0 [ 484.990555][T23791] ? blk_alloc_queue_stats+0x2c/0x90 [ 484.990633][T23791] blk_alloc_queue_stats+0x2c/0x90 [ 484.990671][T23791] blk_alloc_queue+0x97/0x320 [ 484.990705][T23791] __blk_alloc_disk+0x4c/0xd0 [ 484.990734][T23791] dm_create+0x36d/0x850 [ 484.990832][T23791] dev_create+0x141/0x290 [ 484.990891][T23791] dm_ctl_ioctl+0x80b/0xad0 [ 484.990986][T23791] ? __pfx_dev_create+0x10/0x10 [ 484.991114][T23791] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 484.991160][T23791] __se_sys_ioctl+0xce/0x140 [ 484.991211][T23791] __x64_sys_ioctl+0x43/0x50 [ 484.991299][T23791] x64_sys_call+0x239d/0x2550 [ 484.991340][T23791] do_syscall_64+0x112/0x360 [ 484.991387][T23791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.991420][T23791] RIP: 0033:0x7f83c114fb19 [ 484.991503][T23791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.991532][T23791] RSP: 002b:00007f83bfb9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 484.991562][T23791] RAX: ffffffffffffffda RBX: 00007f83c13d5fa0 RCX: 00007f83c114fb19 [ 484.991664][T23791] RDX: 0000200000000580 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 484.991685][T23791] RBP: 00007f83c11e7b70 R08: 0000000000000000 R09: 0000000000000000 [ 484.991705][T23791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.991725][T23791] R13: 00007f83c13d6038 R14: 00007f83c13d5fa0 R15: 00007ffcf8826af8 [ 484.991753][T23791] [ 486.177570][ T3411] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 486.179611][ T3411] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 486.234920][T23814] loop7: detected capacity change from 0 to 1024 [ 486.263016][T23825] netlink: 'syz.5.5224': attribute type 1 has an invalid length. [ 486.268428][T23814] EXT4-fs: Ignoring removed bh option [ 486.338341][T23814] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 486.358323][T23825] 8021q: adding VLAN 0 to HW filter on device bond4 [ 486.425660][T23827] bond4: (slave veth5): Enslaving as an active interface with a down link [ 486.426541][T23825] veth0_virt_wifi: entered promiscuous mode [ 486.446490][T23825] bond4: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 486.485768][T23825] bond4: (slave veth0_virt_wifi): Releasing active interface [ 486.510516][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 486.510538][ T29] audit: type=1400 audit(1793810997.471:3018): avc: denied { listen } for pid=23813 comm="syz.7.5220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 486.579361][T23830] loop5: detected capacity change from 0 to 512 [ 486.598090][T23830] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 486.598113][T23830] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 486.602814][T23830] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.5226: bg 0: block 4: invalid block bitmap [ 486.602916][T23830] loop5: lost filesystem error report for type 5 error -117 [ 486.604366][T23830] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 486.604424][T23830] loop5: lost filesystem error report for type 5 error -117 [ 486.608306][T23830] EXT4-fs error (device loop5): ext4_free_branches:1040: inode #11: comm syz.5.5226: invalid indirect mapped block 1 (level 1) [ 486.608397][T23830] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 486.609121][T23830] EXT4-fs (loop5): 1 truncate cleaned up [ 486.610242][T23830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.649079][ T29] audit: type=1400 audit(1793810997.601:3019): avc: denied { read } for pid=23829 comm="syz.5.5226" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 486.649119][ T29] audit: type=1400 audit(1793810997.601:3020): avc: denied { open } for pid=23829 comm="syz.5.5226" path="/191/file0/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 486.762515][T21322] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.851852][T23841] loop8: detected capacity change from 0 to 512 [ 486.855131][T23841] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 486.869979][T23841] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082] [ 486.870085][T23841] System zones: 0-2, 18-18, 34-34 [ 486.882991][T23841] EXT4-fs (loop8): 1 orphan inode deleted [ 486.897315][T23842] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 486.898249][T23841] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.899910][T23842] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 486.900296][T23841] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.908724][T15393] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 486.908753][T15393] EXT4-fs error (device loop8): ext4_release_dquot:7156: comm kworker/u8:17: Failed to release dquot type 1 [ 486.959998][ T29] audit: type=1400 audit(1793810997.921:3021): avc: denied { write } for pid=23840 comm="syz.8.5229" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 487.120612][T23853] loop6: detected capacity change from 0 to 1024 [ 487.129991][T23853] EXT4-fs: Ignoring removed bh option [ 487.141314][T23853] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 487.163006][T23533] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.175456][T23853] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.207000][ T29] audit: type=1400 audit(1793810998.171:3022): avc: denied { write } for pid=23852 comm="syz.6.5233" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 487.387913][T23574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.443012][T23858] loop2: detected capacity change from 0 to 256 [ 487.458415][ T29] audit: type=1400 audit(1793810998.421:3023): avc: denied { view } for pid=23863 comm="syz.6.5236" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 487.675524][T23875] FAULT_INJECTION: forcing a failure. [ 487.675524][T23875] name failslab, interval 1, probability 0, space 0, times 0 [ 487.675627][T23875] CPU: 0 UID: 0 PID: 23875 Comm: syz.8.5241 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 487.675668][T23875] Tainted: [W]=WARN [ 487.675706][T23875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 487.675730][T23875] Call Trace: [ 487.675739][T23875] [ 487.675749][T23875] __dump_stack+0x1d/0x30 [ 487.675785][T23875] dump_stack_lvl+0x95/0xd0 [ 487.675817][T23875] dump_stack+0x15/0x1b [ 487.675841][T23875] should_fail_ex+0x259/0x270 [ 487.675882][T23875] should_failslab+0x8c/0xb0 [ 487.675922][T23875] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 487.675985][T23875] ? __d_alloc+0x34/0x320 [ 487.676058][T23875] ? __d_alloc+0x34/0x320 [ 487.676097][T23875] __d_alloc+0x34/0x320 [ 487.676163][T23875] d_alloc+0x2e/0x100 [ 487.676210][T23875] lookup_one_qstr_excl+0x95/0x240 [ 487.676327][T23875] start_dirop+0x3e/0x70 [ 487.676354][T23875] simple_start_creating+0xa2/0xd0 [ 487.676400][T23875] debugfs_start_creating+0xcd/0x160 [ 487.676463][T23875] __debugfs_create_file+0x70/0x2b0 [ 487.676500][T23875] debugfs_create_file_full+0x3f/0x60 [ 487.676528][T23875] ref_tracker_dir_debugfs+0x10e/0x1e0 [ 487.676574][T23875] preinit_net+0x1e4/0x330 [ 487.676681][T23875] copy_net_ns+0x188/0x490 [ 487.676714][T23875] create_new_namespaces+0x1f6/0x420 [ 487.676748][T23875] unshare_nsproxy_namespaces+0x115/0x150 [ 487.676841][T23875] ksys_unshare+0x3a3/0x690 [ 487.676887][T23875] __x64_sys_unshare+0x1f/0x30 [ 487.676922][T23875] x64_sys_call+0x1e33/0x2550 [ 487.677024][T23875] do_syscall_64+0x112/0x360 [ 487.677118][T23875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.677143][T23875] RIP: 0033:0x7f996246fb19 [ 487.677160][T23875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.677181][T23875] RSP: 002b:00007f9960ec7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 487.677218][T23875] RAX: ffffffffffffffda RBX: 00007f99626f5fa0 RCX: 00007f996246fb19 [ 487.677233][T23875] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 487.677247][T23875] RBP: 00007f9962507b70 R08: 0000000000000000 R09: 0000000000000000 [ 487.677314][T23875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.677327][T23875] R13: 00007f99626f6038 R14: 00007f99626f5fa0 R15: 00007fff05f7e458 [ 487.677384][T23875] [ 487.694855][T23878] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 487.694881][T23878] SELinux: failed to load policy [ 487.926004][T23875] rxe_eth0 speed is unknown, defaulting to 1000 [ 488.144373][T23897] -1: renamed from syzkaller0 [ 488.218789][T23899] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5251'. [ 488.278166][T23904] Unknown metaid 8705 dlen 4 [ 488.327478][T23908] loop2: detected capacity change from 0 to 512 [ 488.329757][T23901] loop7: detected capacity change from 0 to 512 [ 488.342157][T23901] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 488.344952][T23901] EXT4-fs (loop7): orphan cleanup on readonly fs [ 488.345095][T23901] EXT4-fs warning (device loop7): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 488.345414][T23901] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 488.345505][T23901] EXT4-fs error (device loop7): ext4_orphan_get:1430: comm syz.7.5252: bad orphan inode 768 [ 488.345568][T23901] loop7: lost filesystem error report for type 5 error -117 [ 488.346597][T23901] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 488.378876][T23901] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 488.392490][T23901] EXT4-fs warning (device loop7): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 488.393272][T23908] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 488.409843][T23908] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082] [ 488.409946][T23908] System zones: 0-2, 18-18, 34-34 [ 488.436178][T23908] EXT4-fs (loop2): 1 orphan inode deleted [ 488.442305][T23908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.443417][T23908] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.453604][T15393] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 488.453715][T15393] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:17: Failed to release dquot type 1 [ 488.485364][ T29] audit: type=1400 audit(1793810999.451:3024): avc: denied { write } for pid=23906 comm="syz.2.5254" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 488.507176][T23479] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.508211][T23915] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5264'. [ 488.613902][T23917] loop7: detected capacity change from 0 to 512 [ 488.771007][T23914] loop6: detected capacity change from 0 to 2048 [ 488.823149][T23922] bio_check_eod: 7819 callbacks suppressed [ 488.823171][T23922] syz.7.5256: attempt to access beyond end of device [ 488.823171][T23922] loop7: rw=2049, sector=1184, nr_sectors = 400 limit=512 [ 488.823511][T23922] syz.7.5256: attempt to access beyond end of device [ 488.823511][T23922] loop7: rw=2049, sector=1616, nr_sectors = 32 limit=512 [ 488.823585][T23922] syz.7.5256: attempt to access beyond end of device [ 488.823585][T23922] loop7: rw=2049, sector=1776, nr_sectors = 32 limit=512 [ 488.823720][T23922] syz.7.5256: attempt to access beyond end of device [ 488.823720][T23922] loop7: rw=2049, sector=1840, nr_sectors = 32 limit=512 [ 488.823847][T23922] syz.7.5256: attempt to access beyond end of device [ 488.823847][T23922] loop7: rw=2049, sector=1968, nr_sectors = 32 limit=512 [ 488.823923][T23922] syz.7.5256: attempt to access beyond end of device [ 488.823923][T23922] loop7: rw=2049, sector=2032, nr_sectors = 32 limit=512 [ 488.823978][T23922] syz.7.5256: attempt to access beyond end of device [ 488.823978][T23922] loop7: rw=2049, sector=2192, nr_sectors = 32 limit=512 [ 488.827254][T23922] syz.7.5256: attempt to access beyond end of device [ 488.827254][T23922] loop7: rw=2049, sector=2288, nr_sectors = 32 limit=512 [ 488.827389][T23922] syz.7.5256: attempt to access beyond end of device [ 488.827389][T23922] loop7: rw=2049, sector=2384, nr_sectors = 32 limit=512 [ 488.827454][T23922] syz.7.5256: attempt to access beyond end of device [ 488.827454][T23922] loop7: rw=2049, sector=2448, nr_sectors = 32 limit=512 [ 488.888733][T19900] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.947624][T23914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.064931][T23574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.299778][T23942] loop2: detected capacity change from 0 to 512 [ 489.509206][T23949] FAULT_INJECTION: forcing a failure. [ 489.509206][T23949] name failslab, interval 1, probability 0, space 0, times 0 [ 489.509415][T23949] CPU: 1 UID: 0 PID: 23949 Comm: syz.5.5266 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 489.509451][T23949] Tainted: [W]=WARN [ 489.509459][T23949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 489.509528][T23949] Call Trace: [ 489.509536][T23949] [ 489.509545][T23949] __dump_stack+0x1d/0x30 [ 489.509583][T23949] dump_stack_lvl+0x95/0xd0 [ 489.509656][T23949] dump_stack+0x15/0x1b [ 489.509685][T23949] should_fail_ex+0x259/0x270 [ 489.509752][T23949] ? addrconf_init_net+0xcc/0x450 [ 489.509838][T23949] should_failslab+0x8c/0xb0 [ 489.509884][T23949] __kmalloc_cache_noprof+0x5d/0x3e0 [ 489.509921][T23949] ? addrconf_init_net+0xcc/0x450 [ 489.510030][T23949] addrconf_init_net+0xcc/0x450 [ 489.510065][T23949] ? ip6addrlbl_net_init+0x335/0x340 [ 489.510110][T23949] ops_init+0x22a/0x2e0 [ 489.510180][T23949] setup_net+0x9f/0x230 [ 489.510272][T23949] copy_net_ns+0x339/0x490 [ 489.510312][T23949] create_new_namespaces+0x1f6/0x420 [ 489.510348][T23949] unshare_nsproxy_namespaces+0x115/0x150 [ 489.510383][T23949] ksys_unshare+0x3a3/0x690 [ 489.510459][T23949] __x64_sys_unshare+0x1f/0x30 [ 489.510502][T23949] x64_sys_call+0x1e33/0x2550 [ 489.510613][T23949] do_syscall_64+0x112/0x360 [ 489.510662][T23949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.510736][T23949] RIP: 0033:0x7f725f7ffb19 [ 489.510759][T23949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.510787][T23949] RSP: 002b:00007f725e24f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 489.510815][T23949] RAX: ffffffffffffffda RBX: 00007f725fa85fa0 RCX: 00007f725f7ffb19 [ 489.510836][T23949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 489.510910][T23949] RBP: 00007f725f897b70 R08: 0000000000000000 R09: 0000000000000000 [ 489.510930][T23949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.510949][T23949] R13: 00007f725fa86038 R14: 00007f725fa85fa0 R15: 00007ffce4f2c838 [ 489.510978][T23949] [ 489.520938][T23942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.521164][T23942] ext4 filesystem being mounted at /351/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 489.571361][ T29] audit: type=1400 audit(1793811000.531:3025): avc: denied { write } for pid=23941 comm="syz.2.5263" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 489.574464][T23942] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.5263: Failed to acquire dquot type 0 [ 489.724322][T19900] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.873597][T23954] netlink: 'syz.2.5268': attribute type 17 has an invalid length. [ 489.873630][T23954] netlink: 'syz.2.5268': attribute type 16 has an invalid length. [ 489.873654][T23954] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5268'. [ 489.900427][T23956] FAULT_INJECTION: forcing a failure. [ 489.900427][T23956] name failslab, interval 1, probability 0, space 0, times 0 [ 489.900465][T23956] CPU: 0 UID: 0 PID: 23956 Comm: syz.6.5270 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 489.900516][T23956] Tainted: [W]=WARN [ 489.900527][T23956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 489.900547][T23956] Call Trace: [ 489.900570][T23956] [ 489.900582][T23956] __dump_stack+0x1d/0x30 [ 489.900684][T23956] dump_stack_lvl+0x95/0xd0 [ 489.900719][T23956] dump_stack+0x15/0x1b [ 489.900750][T23956] should_fail_ex+0x259/0x270 [ 489.900784][T23956] ? ep_insert+0x13b/0xd70 [ 489.900901][T23956] should_failslab+0x8c/0xb0 [ 489.900942][T23956] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 489.901035][T23956] ? __pfx_futex_wake_mark+0x10/0x10 [ 489.901070][T23956] ? ep_insert+0x13b/0xd70 [ 489.901152][T23956] ? percpu_counter_add_batch+0xb5/0x120 [ 489.901218][T23956] ep_insert+0x13b/0xd70 [ 489.901264][T23956] ? futex_wait+0x18f/0x1c0 [ 489.901313][T23956] do_epoll_ctl_file+0x640/0x700 [ 489.901367][T23956] __se_sys_epoll_ctl+0xf1/0x190 [ 489.901443][T23956] __x64_sys_epoll_ctl+0x55/0x70 [ 489.901471][T23956] x64_sys_call+0x6a5/0x2550 [ 489.901527][T23956] do_syscall_64+0x112/0x360 [ 489.901576][T23956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.901608][T23956] RIP: 0033:0x7f47d683fb19 [ 489.901708][T23956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.901808][T23956] RSP: 002b:00007f47d5297028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 489.901837][T23956] RAX: ffffffffffffffda RBX: 00007f47d6ac5fa0 RCX: 00007f47d683fb19 [ 489.901856][T23956] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 489.901872][T23956] RBP: 00007f47d68d7b70 R08: 0000000000000000 R09: 0000000000000000 [ 489.901892][T23956] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 489.901911][T23956] R13: 00007f47d6ac6038 R14: 00007f47d6ac5fa0 R15: 00007ffd4c18e138 [ 489.901995][T23956] [ 490.145168][T23958] team0 (unregistering): Port device team_slave_0 removed [ 490.149532][T23958] team0 (unregistering): Port device team_slave_1 removed [ 490.184056][T23968] netlink: 'syz.8.5274': attribute type 4 has an invalid length. [ 490.310271][T23975] FAULT_INJECTION: forcing a failure. [ 490.310271][T23975] name failslab, interval 1, probability 0, space 0, times 0 [ 490.310325][T23975] CPU: 0 UID: 0 PID: 23975 Comm: syz.5.5277 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 490.310365][T23975] Tainted: [W]=WARN [ 490.310376][T23975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 490.310395][T23975] Call Trace: [ 490.310404][T23975] [ 490.310467][T23975] __dump_stack+0x1d/0x30 [ 490.310503][T23975] dump_stack_lvl+0x95/0xd0 [ 490.310633][T23975] dump_stack+0x15/0x1b [ 490.310658][T23975] should_fail_ex+0x259/0x270 [ 490.310694][T23975] ? pidfs_register_pid_gfp+0x85/0x160 [ 490.310794][T23975] should_failslab+0x8c/0xb0 [ 490.310833][T23975] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 490.310935][T23975] ? pidfs_register_pid_gfp+0x85/0x160 [ 490.310977][T23975] pidfs_register_pid_gfp+0x85/0x160 [ 490.311019][T23975] __pidfs_register_pids+0x3b/0x90 [ 490.311110][T23975] unix_stream_connect+0x257/0xbd0 [ 490.311150][T23975] p9_fd_create_unix+0x188/0x2f0 [ 490.311196][T23975] p9_client_create+0x22d/0x760 [ 490.311225][T23975] ? v9fs_get_tree+0x49/0x600 [ 490.311327][T23975] ? should_failslab+0x8c/0xb0 [ 490.311374][T23975] v9fs_session_init+0x38/0x510 [ 490.311428][T23975] v9fs_get_tree+0x5c/0x600 [ 490.311463][T23975] vfs_get_tree+0x57/0x1d0 [ 490.311522][T23975] do_new_mount+0x288/0x730 [ 490.311558][T23975] path_mount+0x4ad/0xba0 [ 490.311590][T23975] __se_sys_mount+0x28c/0x2e0 [ 490.311649][T23975] __x64_sys_mount+0x67/0x80 [ 490.311682][T23975] x64_sys_call+0xc3b/0x2550 [ 490.311756][T23975] do_syscall_64+0x112/0x360 [ 490.311807][T23975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.311836][T23975] RIP: 0033:0x7f725f7ffb19 [ 490.311858][T23975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.311954][T23975] RSP: 002b:00007f725e24f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 490.311984][T23975] RAX: ffffffffffffffda RBX: 00007f725fa85fa0 RCX: 00007f725f7ffb19 [ 490.312006][T23975] RDX: 0000200000000c40 RSI: 0000200000000c00 RDI: 0000200000000bc0 [ 490.312025][T23975] RBP: 00007f725f897b70 R08: 00002000000004c0 R09: 0000000000000000 [ 490.312046][T23975] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 490.312075][T23975] R13: 00007f725fa86038 R14: 00007f725fa85fa0 R15: 00007ffce4f2c838 [ 490.312103][T23975] [ 490.328680][T23975] 9pnet_fd: p9_fd_create_unix (23975): problem connecting socket: ./proc/thread-self/fail-nth: -12 [ 490.475476][T23973] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.475710][T23973] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.614463][T23533] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.269390][T24014] FAULT_INJECTION: forcing a failure. [ 491.269390][T24014] name failslab, interval 1, probability 0, space 0, times 0 [ 491.269431][T24014] CPU: 1 UID: 0 PID: 24014 Comm: syz.8.5291 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 491.269469][T24014] Tainted: [W]=WARN [ 491.269478][T24014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 491.269507][T24014] Call Trace: [ 491.269515][T24014] [ 491.269524][T24014] __dump_stack+0x1d/0x30 [ 491.269556][T24014] dump_stack_lvl+0x95/0xd0 [ 491.269618][T24014] dump_stack+0x15/0x1b [ 491.269681][T24014] should_fail_ex+0x259/0x270 [ 491.269764][T24014] ? request_threaded_irq+0x1ad/0x2c0 [ 491.269808][T24014] should_failslab+0x8c/0xb0 [ 491.269858][T24014] __kmalloc_cache_noprof+0x5d/0x3e0 [ 491.269951][T24014] ? request_threaded_irq+0x1ad/0x2c0 [ 491.270036][T24014] ? __pfx_serial8250_interrupt+0x10/0x10 [ 491.270077][T24014] request_threaded_irq+0x1ad/0x2c0 [ 491.270147][T24014] ? __pfx_serial8250_interrupt+0x10/0x10 [ 491.270181][T24014] univ8250_setup_irq+0x2ab/0x300 [ 491.270267][T24014] serial8250_do_startup+0xa5b/0x19a0 [ 491.270309][T24014] ? kfree+0x143/0x3b0 [ 491.270409][T24014] serial8250_startup+0x41/0x50 [ 491.270451][T24014] uart_startup+0x46b/0xba0 [ 491.270489][T24014] uart_port_activate+0x67/0xc0 [ 491.270559][T24014] tty_port_open+0x14c/0x1f0 [ 491.270596][T24014] uart_open+0x30/0x40 [ 491.270630][T24014] tty_open+0x3db/0xb70 [ 491.270732][T24014] chrdev_open+0x2eb/0x3a0 [ 491.270843][T24014] do_dentry_open+0x496/0xa40 [ 491.270879][T24014] ? __pfx_chrdev_open+0x10/0x10 [ 491.270928][T24014] ? may_open+0x1f4/0x350 [ 491.270968][T24014] vfs_open_consume+0x46/0x1f0 [ 491.271069][T24014] path_openat+0xc16/0x11c0 [ 491.271112][T24014] do_file_open+0x16c/0x290 [ 491.271158][T24014] do_sys_openat2+0xa1/0x140 [ 491.271191][T24014] __x64_sys_openat+0xf2/0x120 [ 491.271273][T24014] x64_sys_call+0x1f72/0x2550 [ 491.271305][T24014] do_syscall_64+0x112/0x360 [ 491.271425][T24014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.271453][T24014] RIP: 0033:0x7f996246fb19 [ 491.271473][T24014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.271497][T24014] RSP: 002b:00007f9960ec7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 491.271548][T24014] RAX: ffffffffffffffda RBX: 00007f99626f5fa0 RCX: 00007f996246fb19 [ 491.271566][T24014] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 491.271583][T24014] RBP: 00007f9962507b70 R08: 0000000000000000 R09: 0000000000000000 [ 491.271600][T24014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.271616][T24014] R13: 00007f99626f6038 R14: 00007f99626f5fa0 R15: 00007fff05f7e458 [ 491.271640][T24014] [ 491.550336][T24017] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5292'. [ 491.646777][T24029] FAULT_INJECTION: forcing a failure. [ 491.646777][T24029] name failslab, interval 1, probability 0, space 0, times 0 [ 491.646822][T24029] CPU: 1 UID: 0 PID: 24029 Comm: syz.6.5297 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 491.646863][T24029] Tainted: [W]=WARN [ 491.646874][T24029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 491.646900][T24029] Call Trace: [ 491.646909][T24029] [ 491.646919][T24029] __dump_stack+0x1d/0x30 [ 491.646957][T24029] dump_stack_lvl+0x95/0xd0 [ 491.646989][T24029] dump_stack+0x15/0x1b [ 491.647019][T24029] should_fail_ex+0x259/0x270 [ 491.647060][T24029] ? anon_vma_clone+0x14f/0x550 [ 491.647086][T24029] should_failslab+0x8c/0xb0 [ 491.647131][T24029] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 491.647174][T24029] ? anon_vma_clone+0x14f/0x550 [ 491.647204][T24029] anon_vma_clone+0x14f/0x550 [ 491.647234][T24029] __split_vma+0x380/0x7c0 [ 491.647271][T24029] vms_gather_munmap_vmas+0x176/0x7f0 [ 491.647312][T24029] ? mas_find+0x336/0x450 [ 491.647336][T24029] mmap_region+0x812/0x29a0 [ 491.647369][T24029] ? __rcu_read_unlock+0x4e/0x70 [ 491.647426][T24029] ? avc_has_perm+0x101/0x190 [ 491.647463][T24029] ? arch_get_unmapped_area_topdown+0x152/0x530 [ 491.647503][T24029] do_mmap+0xa20/0xc70 [ 491.647552][T24029] vm_mmap_pgoff+0x183/0x310 [ 491.647591][T24029] ksys_mmap_pgoff+0x250/0x310 [ 491.647619][T24029] x64_sys_call+0x23b3/0x2550 [ 491.647651][T24029] do_syscall_64+0x112/0x360 [ 491.647688][T24029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.647719][T24029] RIP: 0033:0x7f47d683fb19 [ 491.647741][T24029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.647769][T24029] RSP: 002b:00007f47d5297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 491.647795][T24029] RAX: ffffffffffffffda RBX: 00007f47d6ac5fa0 RCX: 00007f47d683fb19 [ 491.647814][T24029] RDX: 0000000002000009 RSI: 0000000000002000 RDI: 000020000008b000 [ 491.647832][T24029] RBP: 00007f47d68d7b70 R08: 0000000000000004 R09: 0000000000000000 [ 491.647850][T24029] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000000 [ 491.647866][T24029] R13: 00007f47d6ac6038 R14: 00007f47d6ac5fa0 R15: 00007ffd4c18e138 [ 491.647899][T24029] [ 492.791457][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 492.791478][ T29] audit: type=1326 audit(1793811003.761:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24066 comm="syz.5.5312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f7ffb19 code=0x7ffc0000 [ 492.793735][ T29] audit: type=1326 audit(1793811003.761:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24066 comm="syz.5.5312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f7ffb19 code=0x7ffc0000 [ 492.796294][ T29] audit: type=1326 audit(1793811003.761:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24066 comm="syz.5.5312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f7ffb19 code=0x7ffc0000 [ 492.796524][ T29] audit: type=1326 audit(1793811003.761:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24066 comm="syz.5.5312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f7ffb19 code=0x7ffc0000 [ 492.800311][ T29] audit: type=1326 audit(1793811003.761:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24066 comm="syz.5.5312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f725f7ffb19 code=0x7ffc0000 [ 492.817954][ T29] audit: type=1326 audit(1793811003.781:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24066 comm="syz.5.5312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f7ffb19 code=0x7ffc0000 [ 492.818319][ T29] audit: type=1326 audit(1793811003.781:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24066 comm="syz.5.5312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f7ffb19 code=0x7ffc0000 [ 492.820293][ T29] audit: type=1326 audit(1793811003.781:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24066 comm="syz.5.5312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f7ffb19 code=0x7ffc0000 [ 492.820457][ T29] audit: type=1326 audit(1793811003.781:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24066 comm="syz.5.5312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f7ffb19 code=0x7ffc0000 [ 492.820883][ T29] audit: type=1326 audit(1793811003.781:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24066 comm="syz.5.5312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f725f7ffb19 code=0x7ffc0000 [ 493.471633][T24072] set_capacity_and_notify: 2 callbacks suppressed [ 493.471678][T24072] loop8: detected capacity change from 0 to 1024 [ 493.472581][T24072] EXT4-fs: Ignoring removed nomblk_io_submit option [ 493.478496][T24072] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0103] [ 493.478547][T24072] System zones: 0-1, 3-36 [ 493.485258][T24072] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.533617][T24076] 9pnet_fd: p9_fd_create_unix (24076): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 493.562587][T24070] loop5: detected capacity change from 0 to 2048 [ 493.609938][T24080] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5316'. [ 493.666717][T23533] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.669826][T24070] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.942414][T21322] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.995146][T24094] loop5: detected capacity change from 0 to 512 [ 493.995952][ T2979] ================================================================== [ 493.995984][ T2979] BUG: KCSAN: data-race in d_make_discardable / path_lookupat [ 493.996022][ T2979] [ 493.996029][ T2979] write to 0xffff888107483cc0 of 4 bytes by task 23480 on cpu 1: [ 493.996052][ T2979] d_make_discardable+0x4f/0x90 [ 493.996078][ T2979] simple_unlink+0x68/0x80 [ 493.996096][ T2979] shmem_unlink+0x12d/0x140 [ 493.996113][ T2979] vfs_unlink+0x1c3/0x4a0 [ 493.996132][ T2979] filename_unlinkat+0x1db/0x400 [ 493.996167][ T2979] __se_sys_unlink+0x2b/0xe0 [ 493.996192][ T2979] __x64_sys_unlink+0x1f/0x30 [ 493.996212][ T2979] x64_sys_call+0x18ee/0x2550 [ 493.996245][ T2979] do_syscall_64+0x112/0x360 [ 493.996288][ T2979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.996316][ T2979] [ 493.996324][ T2979] read to 0xffff888107483cc0 of 4 bytes by task 2979 on cpu 0: [ 493.996345][ T2979] path_lookupat+0x19b/0x4c0 [ 493.996381][ T2979] filename_lookup+0x18f/0x390 [ 493.996413][ T2979] do_readlinkat+0x74/0x2f0 [ 493.996443][ T2979] __x64_sys_readlink+0x47/0x60 [ 493.996469][ T2979] x64_sys_call+0x1d41/0x2550 [ 493.996504][ T2979] do_syscall_64+0x112/0x360 [ 493.996537][ T2979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.996558][ T2979] [ 493.996563][ T2979] value changed: 0x08300080 -> 0x00004080 [ 493.996574][ T2979] [ 493.996579][ T2979] Reported by Kernel Concurrency Sanitizer on: [ 493.996599][ T2979] CPU: 0 UID: 0 PID: 2979 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 493.996638][ T2979] Tainted: [W]=WARN [ 493.996648][ T2979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 493.996666][ T2979] ================================================================== [ 494.030587][T24094] EXT4-fs error (device loop5): ext4_iget_extra_inode:6027: inode #15: comm syz.5.5321: corrupted in-inode xattr: invalid ea_ino [ 494.030679][T24094] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 494.031102][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 494.031121][ C0] EXT4-fs (loop5): initial error at time 1793811004: ext4_iget_extra_inode:6027: inode 15 [ 494.031165][ C0] EXT4-fs (loop5): last error at time 1793811004: ext4_iget_extra_inode:6027: inode 15 [ 494.032371][T24094] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.5321: couldn't read orphan inode 15 (err -117) [ 494.032455][T24094] loop5: lost filesystem error report for type 5 error -117 [ 494.033518][T24094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.124162][T21322] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.