last executing test programs: 6.005237198s ago: executing program 0 (id=399): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) read$nci(r0, 0x0, 0x0) 4.505310779s ago: executing program 4 (id=408): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x34, r1, 0x113, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004000}, 0x80) 4.46517622s ago: executing program 4 (id=410): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xba6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4df}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x10, 0x40, 0xc, 0x0, 0x0, 0x0, 0x5}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r2, 0x0, 0x3, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) sendmmsg$inet(r2, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2890) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), r7) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r8, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x1c890) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 4.116894797s ago: executing program 1 (id=413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000000008, 0xffffffffffffffff}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)=ANY=[@ANYBLOB="65b13dfa0180c200000000040000afdd"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x5) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x6, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='rdma.current\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x2}) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x2, 0x2, 0x100715f, 0x900000200000000}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x6a0, 0x270, 0x270, 0x270, 0x270, 0x190, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0xd8, 0x100, 0x0, {0x7a00000010000000}, [@common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x21, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x1000000}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x700) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0xf, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x6008011}, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r5, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801") r6 = socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x1, 0x0) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, 0x0, 0x3}, 0x18) creat(0x0, 0x40) 3.576657772s ago: executing program 4 (id=417): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r1, 0x6000, 0x409}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000340)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x3a}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0xffffff1a, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) pipe2$9p(&(0x7f0000000180), 0x80800) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$usbfs(0x0, 0xf, 0x240000) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x1, 0x4, 0x2, 0x8, 0x0, 0x4, 0x22800, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xfffffffffffffff9, 0x5}, 0x8, 0x7, 0x3a1c00, 0x4, 0x9, 0x7, 0x4, 0x0, 0x4, 0x0, 0x100000001}, 0xffffffffffffffff, 0xe, r3, 0x1) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x120, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, r4, 0x9) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f00000000c0)={0x1, 0xe0ee, 0x7f}) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 3.168465691s ago: executing program 1 (id=421): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x34, r1, 0x113, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004000}, 0x80) 3.113412344s ago: executing program 1 (id=422): r0 = creat(0x0, 0xc7) socket$inet6(0xa, 0x3, 0x8000000003c) close(r0) socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4440, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x4000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x2) futex(0x0, 0x6, 0x80, 0x0, 0x0, 0xffffffec) futex(0x0, 0x100, 0x1, 0x0, 0x0, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0x7, 0x0, 0x3, 0x800000, 0xb6e, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x7, 0x2, 0x0, 0x14008, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x3}, 0x50) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) mknod$loop(&(0x7f0000003600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000, 0x0) 3.037048367s ago: executing program 4 (id=424): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r1, 0x6000, 0x409}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@getchain={0x5c, 0x66, 0x432, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x5}, {0xb, 0x2}, {0x5, 0x10}}, [{0x8, 0xb, 0x20009}, {0x8, 0xb, 0xe}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x6848327d}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0x3}]}, 0x5c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x3) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000340)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x3a}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0xffffff1a, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) pipe2$9p(&(0x7f0000000180), 0x80800) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$usbfs(0x0, 0xf, 0x240000) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x1, 0x4, 0x2, 0x8, 0x0, 0x4, 0x22800, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xfffffffffffffff9, 0x5}, 0x8, 0x7, 0x3a1c00, 0x4, 0x9, 0x7, 0x4, 0x0, 0x4, 0x0, 0x100000001}, 0xffffffffffffffff, 0xe, r5, 0x1) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x120, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, r6, 0x9) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f00000000c0)={0x1, 0xe0ee, 0x7f}) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) unshare(0x62040200) 2.931978462s ago: executing program 0 (id=425): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x40000000015, 0x5, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x40000020, &(0x7f0000000600)={0xa, 0x4e20, 0x7fc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) 2.060393373s ago: executing program 0 (id=429): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00'}, 0x2c) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70700000100000063115f00000000009500000001ff0000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getrule={0x1c, 0x22, 0x2, 0x70bd2d, 0x25dfdbfe, {0x2, 0x0, 0x80, 0x7f, 0xc5, 0x0, 0x0, 0x6, 0x29}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x120, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r4, &(0x7f0000000880)={0x27, r6, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) close(r5) close(0x4) sendfile(r3, r3, &(0x7f0000000040)=0x2eb2, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r7, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.057783343s ago: executing program 4 (id=430): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x10}, 0x10000d, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x103}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x300, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MAP={0x24, 0xe, {0x8000000000000000, 0x3, 0xffff, 0x0, 0x9, 0x7}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}}, 0x8000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x80020849, 0x3, 0x1, 0x2, 0xffffff01}, 0x20, 0x100) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000140)='scalable', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x17) r7 = socket$nl_generic(0x10, 0x3, 0x10) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r7) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000003c0)={0x4c, r8, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xa, 0x1, 0x6, 0x7]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x4c}, 0x1, 0x4000000000000000, 0x0, 0x8c2}, 0x24000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b000100697036677265000040000280060003009e000000080005000000600006000f0004000000080004000200000006000200ff01000004001200060002"], 0x70}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r9, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0xc, r9, 0x1, 0xf}, 0x14) socket$nl_route(0x10, 0x3, 0x0) 2.039555094s ago: executing program 1 (id=431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000000008, 0xffffffffffffffff}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)=ANY=[@ANYBLOB="65b13dfa0180c200000000040000afdd"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x5) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x6, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='rdma.current\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x2}) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x2, 0x2, 0x100715f, 0x900000200000000}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x6a0, 0x270, 0x270, 0x270, 0x270, 0x190, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0xd8, 0x100, 0x0, {0x7a00000010000000}, [@common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x21, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x1000000}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x700) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0xf, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x6008011}, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r5, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801") r6 = socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x1, 0x0) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, 0x0, 0x3}, 0x18) creat(0x0, 0x40) 1.844462463s ago: executing program 2 (id=432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x28, r1, 0x113, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x80) 1.765495677s ago: executing program 2 (id=433): r0 = socket$nl_route(0x10, 0x3, 0x0) futex(0x0, 0xc, 0x1, &(0x7f00000002c0), &(0x7f0000048000), 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x25, 0x2, @val=@netkit}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c40)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r1, {0x0, 0x7}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r2, 0x0, 0x0}, 0x10) 1.640622543s ago: executing program 0 (id=435): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830a}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x8, 0x7800, 0x2, 0x8, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x66, 0x0, 0x80, 0x29, 0x0, @loopback, @multicast1, {[@end]}}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000004c0)={@empty, 0x0}, &(0x7f0000000500)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000540)={@loopback, 0x0}, &(0x7f0000000580)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000600)={0x0, @multicast2}, &(0x7f0000000640)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000001c0), 0xc, &(0x7f00000012c0)={&(0x7f00000010c0)={0x1b8, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xcc0a79521378fd2d}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x4}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000240)='binfmt_misc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) write$cgroup_type(r6, &(0x7f0000000080), 0x9) syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f0000000100)='./cgroup/../file0\x00', 0x2004401, &(0x7f0000000040), 0x2c, 0x561, &(0x7f0000000b40)="$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") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) openat(r0, 0x0, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r8) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r9, 0xd09, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x81}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c030) write(r7, &(0x7f0000000380)='+192.0.2.1\n', 0xb) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) socket$nl_route(0x10, 0x3, 0x0) 1.620278964s ago: executing program 4 (id=436): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) read$nci(r0, 0x0, 0x0) 1.582792295s ago: executing program 2 (id=437): set_mempolicy(0x4005, &(0x7f0000000080)=0x10000000004, 0xd) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x20) 1.503803659s ago: executing program 2 (id=438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000000008, 0xffffffffffffffff}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x5) ioctl$VT_ACTIVATE(r0, 0x5606, 0x4) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x6, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='rdma.current\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x2}) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x2, 0x2, 0x100715f, 0x900000200000000}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x6a0, 0x270, 0x270, 0x270, 0x270, 0x190, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0xd8, 0x100, 0x0, {0x7a00000010000000}, [@common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x21, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x1000000}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x700) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0xf, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x6008011}, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r5, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801") r6 = socket(0x1d, 0x2, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) socket$kcm(0x10, 0x1, 0x0) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, r8, 0x3}, 0x18) creat(0x0, 0x40) 1.232550022s ago: executing program 0 (id=439): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x82, "25bbc0834ec51a41c20a4fe34f94ee68e8a02d31450b050da0de2cf8fb33290a33254201c2edebe6725757979253295aae50d41ca164d67cd0b0e95767d50854775dffec166646fafb7241224d7cc33b6063b3d839605dcbd1b9b878f406504103fd7789bacce2575e1493e513fee1830e843e9927fe81d13f01e175a3c3b77ee3d6"}, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, 0xffffffffffffffff, 0x913e0000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01300134b1ff"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x2000000000000102, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) setns(0xc9, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x10f) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) bind$x25(0xffffffffffffffff, &(0x7f0000000100), 0x12) listen(0xffffffffffffffff, 0x1) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) r5 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='.\x02\x00', 0x22000402, &(0x7f00000002c0)={[{@dioread_lock}, {@init_itable}, {@noinit_itable}, {@discard}, {@resuid}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@usrquota}, {@usrjquota_path={'usrjquota', 0x3d, '.\x02'}}, {@mblk_io_submit}, {@nolazytime}], [], 0x2c}, 0x1, 0x4ef, &(0x7f00000025c0)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc340000000e0a010200000000000000000a0000020900010073797a31000000000900020073797a31000000000800038004000080140000001100010000000000000000000100000a"], 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x1ffffff) prctl$PR_SCHED_CORE(0x46, 0x1, 0x0, 0x2, 0x0) timerfd_create(0x5, 0x800) 1.068735309s ago: executing program 1 (id=440): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x40000020, &(0x7f0000000600)={0xa, 0x4e20, 0x7fc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) 1.06456163s ago: executing program 3 (id=441): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x6000, 0x409}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000340)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x3a}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0xffffff1a, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) pipe2$9p(&(0x7f0000000180), 0x80800) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$usbfs(0x0, 0xf, 0x240000) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x1, 0x4, 0x2, 0x8, 0x0, 0x4, 0x22800, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xfffffffffffffff9, 0x5}, 0x8, 0x7, 0x3a1c00, 0x4, 0x9, 0x7, 0x4, 0x0, 0x4, 0x0, 0x100000001}, 0xffffffffffffffff, 0xe, r2, 0x1) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x120, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, r3, 0x9) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f00000000c0)={0x1, 0xe0ee, 0x7f}) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 998.022313ms ago: executing program 0 (id=442): r0 = creat(0x0, 0xc7) socket$inet6(0xa, 0x3, 0x8000000003c) close(r0) socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4440, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x4000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x2) futex(0x0, 0x100, 0x1, 0x0, 0x0, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0x7, 0x0, 0x3, 0x800000, 0xb6e, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x7, 0x2, 0x0, 0x14008, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x3}, 0x50) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) mknod$loop(&(0x7f0000003600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000, 0x0) 660.089249ms ago: executing program 2 (id=443): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf00004e"], 0x2a) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x80}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000003}, 0x2000400c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000d3000000d3000000080000000000000000000001000000006d0005000f0000000000001010000000070000000200000f01000000040000008f7f00002b000000040000008600000004000000d60f0000000000000b050000000b00000000000002050000000a0000000200000f02000000030000000700000003000000010000000200000009c40000a052000000000900000d000000000f0000000000000008000000060000000c000000020000000e000000050000000a0000000300000005000000010000000a00000002000000050000000400000008000000050000000000005f61002e5f001b6bb64614830aadc52e5c1b7340ccf7e1fcec7f98b7e2b6a0f7eddcabb29cc46eb8963b06db1476ebde8baec991bf13a59945e05a57a0fa7528a1fcb22a843dc24caf170344f5e858cc47182fb42d711b6cdc3f963de820187f4766de38235bf2f011398efac530934663606691447e3795b6e134576e2f5535c15300"], &(0x7f0000000300)=""/113, 0xf4, 0x71, 0x6, 0xcdb, 0x10000, @value=r0}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') lseek(r4, 0xc, 0x0) getdents(r4, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x6, 0xffffffff, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x17e) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000600)='./tracing/dynamic_events\x00', 0x118) write$binfmt_script(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40cd00) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000300)={{0xc, 0x8}, 'port0\x00', 0x41, 0x40812, 0x5, 0x3, 0x3, 0x2, 0xfff, 0x0, 0x6, 0x4}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8a000, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x4) 558.379613ms ago: executing program 3 (id=444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x28, r1, 0x113, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x80) 505.594266ms ago: executing program 3 (id=445): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf00004e"], 0x2a) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x80}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000003}, 0x2000400c) 433.402929ms ago: executing program 3 (id=446): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x10}, 0x10000d, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x103}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x300, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MAP={0x24, 0xe, {0x8000000000000000, 0x3, 0xffff, 0x0, 0x9, 0x7}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}}, 0x8000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x80020849, 0x3, 0x1, 0x2, 0xffffff01}, 0x20, 0x100) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000140)='scalable', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x17) r7 = socket$nl_generic(0x10, 0x3, 0x10) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r7) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000003c0)={0x4c, r8, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xa, 0x1, 0x6, 0x7]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x4c}, 0x1, 0x4000000000000000, 0x0, 0x8c2}, 0x24000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b000100697036677265000040000280060003009e000000080005000000600006000f0004000000080004000200000006000200ff01000004001200060002"], 0x70}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r9, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0xc, r9, 0x1, 0xf}, 0x14) socket$nl_route(0x10, 0x3, 0x0) 278.303126ms ago: executing program 2 (id=447): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00'}, 0x2c) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70700000100000063115f00000000009500000001ff0000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getrule={0x1c, 0x22, 0x2, 0x70bd2d, 0x25dfdbfe, {0x2, 0x0, 0x80, 0x7f, 0xc5, 0x0, 0x0, 0x6, 0x29}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x120, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r4, &(0x7f0000000880)={0x27, r6, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) close(r5) close(0x4) sendfile(r3, r3, &(0x7f0000000040)=0x2eb2, 0x4) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)={@map=r3, 0xffffffffffffffff, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 276.647516ms ago: executing program 3 (id=448): r0 = socket$nl_route(0x10, 0x3, 0x0) futex(0x0, 0xc, 0x1, &(0x7f00000002c0), &(0x7f0000048000), 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x25, 0x2, @val=@netkit}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c40)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r1, {0x0, 0x7}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r2, 0x0, 0x0}, 0x10) 128.547653ms ago: executing program 1 (id=449): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830a}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x8, 0x7800, 0x2, 0x8, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x66, 0x0, 0x80, 0x29, 0x0, @loopback, @multicast1, {[@end]}}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000004c0)={@empty, 0x0}, &(0x7f0000000500)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000540)={@loopback, 0x0}, &(0x7f0000000580)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000600)={0x0, @multicast2}, &(0x7f0000000640)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000001c0), 0xc, &(0x7f00000012c0)={&(0x7f00000010c0)={0x1b8, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xcc0a79521378fd2d}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x4}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000240)='binfmt_misc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) write$cgroup_type(r6, &(0x7f0000000080), 0x9) syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f0000000100)='./cgroup/../file0\x00', 0x2004401, &(0x7f0000000040), 0x2c, 0x561, &(0x7f0000000b40)="$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") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) openat(r0, 0x0, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r8) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r9, 0xd09, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x81}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c030) write(r7, &(0x7f0000000380)='+192.0.2.1\n', 0xb) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=450): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2204814, &(0x7f00000010c0)=ANY=[@ANYBLOB='norock,unhide,map=acorn,norock,map=normal,unhide,map=normal,check=relaxed,cruft,nojoliet,dmode=0x0000000000000003,norock,cruft,gid=', @ANYRESHEX=0x0, @ANYBLOB="c0f5"], 0xc1, 0xa55, &(0x7f0000000640)="$eJzs3U9sHFleB/Bvte3E8S5JdjYMw2hm0smQrHfWOLazkxDNYUnsTsaL/yDbkSbisNndOCjEMGgD0kyElMyFEyM4IA5wG3GCAyPthb2gucENThyQVnPivuIUJCSj6mrbbbvbHWcd28l8Pla7q1796r1fVVf3c3eX64UXy+qJTXOrq83b08x/0lbWcvMf9iFjDrFrU19+9vmn5e2TxzmSvrxb/HMymKSe9Cd5LRmYnFqYnz26c0X3k9tJvkiKJGVw8bQ53E7xl/n6xvwXKf6ubLerI09bM72s8pV20McfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcRsXk1NjYeHEk03M3P6hXkvo2k1ML80VWV7cvWVun8rPmqN/Fz3q2mxTlLYODa0N9v3ZqY/GrSepn80Y190ZzQPIM5uHXXj353jf7a2vrd8vml3L0qapNrcrt/g9XVpZ/0j1u9VEVt4cJHh43GnPTi/PTs1dvNOrTi/P1K5cujV14//pi/fr0TGPx1uJSY7Y+udC4ujS/UB+e/HZ9/MqVi/XG6K35m3M3pkZnGmuFl39zYmzsUv37o7/buLqwOD934fuji5PvT8/MTM/daMaUi8uYy+WB+DvTS/WlxtXZev3uvZXli1ty6tu6s8ug8V5bUgZN9Ijpz9jExPj4xMT4J63RsyfWCi69e+Xdy2Nj/WNbZFvEczpoOVyOdXyY/8+o6xwqtar/zx/MZDpzuZkPUu/4M5mpLGQ+s12Wt6z1/+cuNHZst73/b/Xy/W2LXy9/nc1brdnBVv//K0na+/8uuezfz4N8nIe5nx9mJStZzk8OPKP9/bmRRuYyncXMZzqzudosqbdK6rmSS7mUsfwg7+d0FlPP9UxnJo0s5lYWs5RG84iazEIauZqlzGch9QxnMt9OPeO5kiu5mHoaGc2tzOdm5nIjU7narOVu7jX3+8UdclwPGu8eVP4xVwVN7FDT1s68PNZ31/83Xta/BHlqe/8iDs9otdX/H9lS3rc9dHhyv5ICAAAA9tSv/1uOn3rlX3+eFHmz+bn89emZxvcOOi0AAABgDzVP13ujvBsop94cbL7/HzvotAAAAIA9VDT/x65IMpTT1dTav0v5EAAAAABeEs3v/99KcXqjwPt/AAAAeMn0vsb+ekS6RBQja5f/rd+p7u+0Iqq5osj0TGN0cn7mvfGcb15lIMmbbbXNJKk1rzlYDDT//eCdnKmizgxV90MbNZZtDpZR46PvjeednG1tyPDb5d3bwx0iJ6rIb1WR32qP7MumyItlJAC87M526o879//d/kIo3slIFTHyerPL73+9Qx88pmcFgMNifYyd/10bmmp7/9+KeKtb///dHd7/lxGv5O7p6pSC0fw4H2YldzKS1hkHpzvVeqQ1ul51GsJIj08DhlqnLPzH5VpGtn0eMLi+re2xy5nIyMYnAj9qfVbRVu/aetXwMk0dBkUAgBfR2R374afr/0d6vP8fckohABwqDz5+WI1g/+Djh6uPWhPrJRsTQ20lj7rEdJs46G0EADbTSwMAAAAAAAAAAAAAAAAAAAAAAAAAAMDe23S5/mOtwq0X8P/388nKynKyq8v+/5ITg50yfLaJWvYp5wOf6EuyNxWWu393a30vu25rsMPBtouJfzzWWv2/D37PH/RE9rxCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvgKKpK9TeS05mmQsyYX9z+r5eXzQCeyV+pFnWq14kif5KMf3PB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK+41vX/a6nuv1YVpb+WnEtyO8nvHXSOe+nJQSfwfBS9Q/6wCty4/n8tGchqkf7qYU8xMDm1MD9bVlUcLZd/+dnnn5a33nU/TllXu7KCsoXyoFpYz7JqoS1s80r5RnOt/2zN1aeuNQ/Ma0vXZ6Zmbyz89kbgq8VPq3Er6m1rr+X7Z+f+5a/aio9UWRQ/Lbe0s6rdoanlB/f/5MM/rk9db7Y7tb3dX9u8XrFTu0/h3sryRNnSUuODpT/9o3sftS16JWeSt4eT4c1b+PvlrUtLZ7buzy3Z/qL48+J4/ia3c7x1wBSrRblzTjS3/9jdeyvLoz/+cOXOek6PNuV0MqeT3EkGO+T0T51zOt392GwedbWBstWxZlD561SPbdxRW43jXfbrN5qHzFDnbejSZr3H86vHfm9ldLFLRk27fKTP92ixo+IXxX8VW8dAqf081Ut9h2dnhyqakW1HSvuyTU+vWhXZ3PKJ9gU/2Fpn12clz8Ff5Ef5rfXxX2ptr/+tx2p/Xo/aWuz2vPhmzu+yxb8/sa1H2dDskU5tGe6o9erTbZ1WnqeqqC55/mq+U9W5i1eU7/TqsZ/T8/9vi+H8Tx4b/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADj8iqQvyerRLeW15FySk0lOlPP1ZHXruo+fob3aUPHMue6FZ8n5xVN03dDiSZ7koxzf74wAAAAAAAAAeD6uTX352eeflrfm9/F9+Y1aku9W3/T3JzlZ/PXA5NTC/GyPigaS22tf6Q/uLofb5a+vb8x/Uc691mOlgz19AABeaP8fAAD//8iLZ/I=") syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x4, 0x61f, &(0x7f0000001140)="$eJzs3c9rXNUeAPDvncmkSZv30j4ej9fyHi/wFi1I00wtVt3Y1oVdFCzYhYiLhiapodMfNCmYWGgKLhQURNyKdOM/4F66dyeCunMtVJGKikpH7syddDKZSdIkM9Pmfj5wM/ece2fO+c6dM/fce3PmBpBbY+mfQsT+iAfnk4jRpmUjUV84lq13/6ebF9IpiWr1lR+TSLK8xvpJ9rgnSwxFxJenIv5RXF3u3MLipclKte5WxJH5y9eOzC0sHp69PHlx+uL0lfLRZ48dn3iufKy8LXHuyR5Pn3n5P++//cYzM19VDidxIs6V3pqKlji2y1iMxYMsxOb8gYg4ns60eV+eNDsghFwrZp/HUkT8K0ajWEvVjcbse32tHNBV1WJEFcipRPuHnGr0AxrH9hs7Dj7X5V5J79w7WT8AWh3/QP3cSAzVjo1230+ajowGauc29m5D+WkZf9488HE6xYrzEL8ub52BbSink6XbEfHvdvEntbrtrUWaxl9YUY8kIiYiYjCr34tbqEPSNN+N8zBr2Wz8hYg4kT2m+ac2Wf5YS7rX8QOQT3dPZjvypTT1cP+X9j0a/Z9Y1f+pXxtq3XdtRr/3f537f439/VDtHHmhpR+W9lnOtn/JUmvGd++e/rBT+c39v3RKy2/0BXvh3u2IAy3xv5MGm/V/0viTNts/XeX8iY2V8dLXP5zutKzf8VfvRBxse/zzsFeazrVenxzOlpWPlY/MzFamJ+p/25bx+Revf9qp/H7Hn27/3R3ib9r+hdbnpe/JtQ2W8dnZO5c7LRtZN/7C94NJ/XhzMMt5c3J+/no5YjA5k61Sv5BVyz+6dl0a6zReI43/0P/bt/8Vn//bK19nuPGVuQHXXr10v9OyzWz/povJD6obrEMnafxT62//Ve0/zftgOXVrzTJ+ee3GfzstWyv+4S3GBgAAAAAAAHlTqF2DTQrjy/OFwvh4fbzsP2N3oXJ1bv6pmas3rkxFHKr9P2Sp0LjSPVpPJ2m6nP0/bCN9tCX9dETsi4iPisO19PiFq5WpfgcPAAAAAAAAAAAAAAAAAAAAj4k92fj/xn2qfy7Wx/8DOdHNG8wBjzftH/Kr1v5X3eIJyAP7f8gv7R/yS/uH/NL+Ib+0f8gv7R/yS/uH/NL+AQAAAGBH2ve/u98mEbH0/HBtSg1my4wIgp2t1O8KAH1T7HcFgL5ZvvSvsw+5s6H+/+/ZjwN2vzpAHyTtMmudg+rajf9u22cCAAAAAAAAAAAAAF1wcH/78f+JscGw4xn2B/m1hfH/fjoAnnB++h/yyzE+sN4o/qFOC4z/BwAAAAAAAAAAAICeGalNSWE8Gws8EoXC+HjE3yJib5SSmdnK9ERE/D0ivimWdqXpcr8rDQAAAAAAAAAAAAAAAAAAADvM3MLipclKZfp688wfq3J29kzjLqg9KOuFeMRnRdL7t2U4IpZzShGPWufuzezKPrZbeZ2BuYXF5LdqTRKxFI9PgFuKa5tn1v3qGOzqFxMAAAAAAAAAAAAAAAAAAORQ09jj9g580uMaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvPbz/f/dm+h0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBk+isAAP//GjM9YA==") kernel console output (not intermixed with test programs): _cache_alloc_lru_noprof+0x7f/0x3f0 [ 44.916818][ T3900] ? __d_alloc+0x34/0x320 [ 44.916845][ T3900] ? __d_alloc+0x34/0x320 [ 44.916873][ T3900] __d_alloc+0x34/0x320 [ 44.916905][ T3900] ? d_alloc_pseudo+0x13/0x80 [ 44.916993][ T3900] d_alloc_pseudo+0x1e/0x80 [ 44.917023][ T3900] alloc_path_pseudo+0xa4/0x140 [ 44.917098][ T3900] alloc_file_pseudo+0x55/0x120 [ 44.917125][ T3900] anon_inode_getfd+0xbf/0x190 [ 44.917145][ T3900] bpf_map_new_fd+0x52/0x70 [ 44.917182][ T3900] map_create+0x43c/0xfe0 [ 44.917267][ T3900] __sys_bpf+0x99a/0xc30 [ 44.917296][ T3900] ? do_futex+0x380/0x460 [ 44.917363][ T3900] __x64_sys_bpf+0x69/0x80 [ 44.917388][ T3900] x64_sys_call+0xf26/0x2550 [ 44.917438][ T3900] do_syscall_64+0x112/0x360 [ 44.917478][ T3900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.917527][ T3900] RIP: 0033:0x7f5db794e159 [ 44.917543][ T3900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.917683][ T3900] RSP: 002b:00007f5db63a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 44.917707][ T3900] RAX: ffffffffffffffda RBX: 00007f5db7bd5fa0 RCX: 00007f5db794e159 [ 44.917722][ T3900] RDX: 0000000000000048 RSI: 0000200000000dc0 RDI: 0000000000000000 [ 44.917734][ T3900] RBP: 00007f5db79e506b R08: 0000000000000000 R09: 0000000000000000 [ 44.917747][ T3900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.917759][ T3900] R13: 00007f5db7bd6038 R14: 00007f5db7bd5fa0 R15: 00007ffc9104a718 [ 44.917776][ T3900] [ 44.945799][ T3903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'. [ 44.970358][ T3904] capability: warning: `syz.1.89' uses deprecated v2 capabilities in a way that may be insecure [ 45.250395][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 45.250412][ T29] audit: type=1400 audit(1789794662.364:708): avc: denied { ioctl } for pid=3921 comm="syz.0.98" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.270113][ T3922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.270191][ T3922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.306483][ T29] audit: type=1326 audit(1789794662.424:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.0.98" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db794e159 code=0x7ffc0000 [ 45.306536][ T29] audit: type=1326 audit(1789794662.424:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.0.98" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db794e159 code=0x7ffc0000 [ 45.306827][ T29] audit: type=1326 audit(1789794662.424:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.0.98" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db794e159 code=0x7ffc0000 [ 45.306854][ T29] audit: type=1326 audit(1789794662.424:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.0.98" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db794e159 code=0x7ffc0000 [ 45.310049][ T29] audit: type=1326 audit(1789794662.424:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.0.98" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f5db794e159 code=0x7ffc0000 [ 45.310139][ T29] audit: type=1326 audit(1789794662.424:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.0.98" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db794e159 code=0x7ffc0000 [ 45.310169][ T29] audit: type=1326 audit(1789794662.424:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.0.98" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db794e159 code=0x7ffc0000 [ 45.310402][ T29] audit: type=1326 audit(1789794662.424:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.0.98" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db794e159 code=0x7ffc0000 [ 45.310427][ T29] audit: type=1326 audit(1789794662.424:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.0.98" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db794e159 code=0x7ffc0000 [ 45.659530][ T3929] Failed to initialize the IGMP autojoin socket (err -2) [ 45.756189][ T3934] loop3: detected capacity change from 0 to 512 [ 45.766353][ T3934] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 45.766533][ T3934] EXT4-fs (loop3): orphan cleanup on readonly fs [ 45.766721][ T3934] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 45.766858][ T3934] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 45.767297][ T3934] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.101: bg 0: block 15: invalid block bitmap [ 45.767383][ T3934] loop3: lost filesystem error report for type 5 error -117 [ 45.767848][ T3934] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 45.767866][ T3934] loop3: lost filesystem error report for type 5 error -117 [ 45.768587][ T3934] EXT4-fs warning (device loop3): ext4_evict_inode:196: inode #16: comm syz.3.101: data will be lost [ 45.768783][ T3934] EXT4-fs (loop3): 1 truncate cleaned up [ 45.769420][ T3934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.861411][ T3933] SELinux: context truncated [ 45.861421][ T3933] SELinux: invalid ocon [ 45.873109][ T3933] SELinux: failed to load policy [ 45.990078][ T3934] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.101: iget: bad i_size value: 360287970189639690 [ 46.127227][ T3939] FAULT_INJECTION: forcing a failure. [ 46.127227][ T3939] name failslab, interval 1, probability 0, space 0, times 0 [ 46.127303][ T3939] CPU: 0 UID: 0 PID: 3939 Comm: syz.0.103 Not tainted syzkaller #0 PREEMPT(lazy) [ 46.127334][ T3939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.127358][ T3939] Call Trace: [ 46.127366][ T3939] [ 46.127375][ T3939] __dump_stack+0x1d/0x30 [ 46.127402][ T3939] dump_stack_lvl+0x95/0xd0 [ 46.127423][ T3939] dump_stack+0x15/0x1b [ 46.127485][ T3939] should_fail_ex+0x262/0x280 [ 46.127514][ T3939] ? security_prepare_creds+0x52/0x120 [ 46.127553][ T3939] should_failslab+0x8c/0xb0 [ 46.127588][ T3939] __kmalloc_noprof+0xd0/0x4d0 [ 46.127659][ T3939] ? security_prepare_creds+0x52/0x120 [ 46.127701][ T3939] ? kmem_cache_alloc_noprof+0x1f5/0x3f0 [ 46.127729][ T3939] security_prepare_creds+0x52/0x120 [ 46.127851][ T3939] prepare_creds+0x385/0x550 [ 46.127879][ T3939] __sys_setresgid+0x46c/0x570 [ 46.127913][ T3939] __x64_sys_setresgid+0x3f/0x50 [ 46.127998][ T3939] x64_sys_call+0x14f8/0x2550 [ 46.128070][ T3939] do_syscall_64+0x112/0x360 [ 46.128111][ T3939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.128134][ T3939] RIP: 0033:0x7f5db794e159 [ 46.128179][ T3939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.128196][ T3939] RSP: 002b:00007f5db63a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 46.128215][ T3939] RAX: ffffffffffffffda RBX: 00007f5db7bd5fa0 RCX: 00007f5db794e159 [ 46.128231][ T3939] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000000 [ 46.128247][ T3939] RBP: 00007f5db79e506b R08: 0000000000000000 R09: 0000000000000000 [ 46.128289][ T3939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.128303][ T3939] R13: 00007f5db7bd6038 R14: 00007f5db7bd5fa0 R15: 00007ffc9104a718 [ 46.128377][ T3939] [ 46.150081][ T3941] capability: warning: `syz.4.104' uses 32-bit capabilities (legacy support in use) [ 46.152686][ T3941] program syz.4.104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.297179][ T3947] FAULT_INJECTION: forcing a failure. [ 46.297179][ T3947] name failslab, interval 1, probability 0, space 0, times 0 [ 46.297270][ T3947] CPU: 1 UID: 0 PID: 3947 Comm: syz.0.109 Not tainted syzkaller #0 PREEMPT(lazy) [ 46.297302][ T3947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.297319][ T3947] Call Trace: [ 46.297327][ T3947] [ 46.297338][ T3947] __dump_stack+0x1d/0x30 [ 46.297429][ T3947] dump_stack_lvl+0x95/0xd0 [ 46.297453][ T3947] dump_stack+0x15/0x1b [ 46.297475][ T3947] should_fail_ex+0x262/0x280 [ 46.297502][ T3947] ? copy_utsname+0x113/0x3a0 [ 46.297588][ T3947] should_failslab+0x8c/0xb0 [ 46.297620][ T3947] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 46.297711][ T3947] ? copy_utsname+0x113/0x3a0 [ 46.297739][ T3947] copy_utsname+0x113/0x3a0 [ 46.297765][ T3947] create_new_namespaces+0xda/0x420 [ 46.297796][ T3947] unshare_nsproxy_namespaces+0x115/0x150 [ 46.297856][ T3947] ksys_unshare+0x42b/0x710 [ 46.297924][ T3947] __x64_sys_unshare+0x1f/0x30 [ 46.297953][ T3947] x64_sys_call+0x1e33/0x2550 [ 46.297981][ T3947] do_syscall_64+0x112/0x360 [ 46.298019][ T3947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.298113][ T3947] RIP: 0033:0x7f5db794e159 [ 46.298129][ T3947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.298214][ T3947] RSP: 002b:00007f5db63a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 46.298236][ T3947] RAX: ffffffffffffffda RBX: 00007f5db7bd5fa0 RCX: 00007f5db794e159 [ 46.298251][ T3947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000066000200 [ 46.298375][ T3947] RBP: 00007f5db79e506b R08: 0000000000000000 R09: 0000000000000000 [ 46.298389][ T3947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.298403][ T3947] R13: 00007f5db7bd6038 R14: 00007f5db7bd5fa0 R15: 00007ffc9104a718 [ 46.298422][ T3947] [ 46.600009][ T3960] usb usb7: check_ctrlrecip: process 3960 (syz.1.107) requesting ep 01 but needs 81 [ 46.600044][ T3960] vhci_hcd vhci_hcd.3: default hub control req: 0211 v0005 i0001 l0 [ 46.726938][ T3962] netlink: 32 bytes leftover after parsing attributes in process `syz.2.113'. [ 46.733719][ T3930] syz.3.101 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 46.734218][ T3930] CPU: 1 UID: 0 PID: 3930 Comm: syz.3.101 Not tainted syzkaller #0 PREEMPT(lazy) [ 46.734319][ T3930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.734331][ T3930] Call Trace: [ 46.734338][ T3930] [ 46.734346][ T3930] __dump_stack+0x1d/0x30 [ 46.734372][ T3930] dump_stack_lvl+0x95/0xd0 [ 46.734398][ T3930] dump_stack+0x15/0x1b [ 46.734482][ T3930] dump_header+0x80/0x240 [ 46.734504][ T3930] oom_kill_process+0x294/0x420 [ 46.734526][ T3930] out_of_memory+0x981/0xbc0 [ 46.734546][ T3930] try_charge_memcg+0x6ba/0xae0 [ 46.734633][ T3930] charge_memcg+0x16f/0x220 [ 46.734659][ T3930] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 46.734689][ T3930] swap_cache_alloc_folio+0x47b/0x610 [ 46.734727][ T3930] swap_cluster_readahead+0x2b7/0x460 [ 46.734752][ T3930] swapin_readahead+0xd8/0x8a0 [ 46.734773][ T3930] ? _raw_spin_unlock+0x9/0x30 [ 46.734798][ T3930] ? swap_put_entries_cluster+0x49c/0x4c0 [ 46.734879][ T3930] ? __entry_text_end+0x11778/0x1020f9 [ 46.734904][ T3930] ? __rcu_read_unlock+0x4e/0x70 [ 46.734938][ T3930] ? swap_cache_get_folio+0x1f7/0x200 [ 46.735025][ T3930] do_swap_page+0x2b7/0x1e40 [ 46.735049][ T3930] ? __css_rstat_updated+0xbb/0x280 [ 46.735092][ T3930] ? __rcu_read_lock+0x36/0x50 [ 46.735122][ T3930] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 46.735183][ T3930] handle_mm_fault+0xb29/0x3bb0 [ 46.735214][ T3930] do_user_addr_fault+0x636/0x1060 [ 46.735298][ T3930] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 46.735325][ T3930] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 46.735508][ T3930] ? trace_page_fault_user+0x1f/0xa0 [ 46.735541][ T3930] exc_page_fault+0x62/0xa0 [ 46.735568][ T3930] asm_exc_page_fault+0x26/0x30 [ 46.735596][ T3930] RIP: 0033:0x7fb568f0b9de [ 46.735615][ T3930] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 a8 b8 ff ff 48 39 dd 75 df 0f 1f 00 8b 05 d6 c3 3b 00 85 c0 0f 8e 63 fd ff ff ad 7e fe ff 49 39 c4 73 98 48 8d 1d b1 a5 3b 00 83 3d b6 c3 3b [ 46.735635][ T3930] RSP: 002b:00007ffc9717ab30 EFLAGS: 00010202 [ 46.735667][ T3930] RAX: 0000000000000002 RBX: 00007fb5692c7da0 RCX: 00005555663ee808 [ 46.735680][ T3930] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 46.735692][ T3930] RBP: 00007fb5692c7da0 R08: 0000000000000000 R09: 0000000000000000 [ 46.735704][ T3930] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000b56e [ 46.735718][ T3930] R13: 00007fb5692c618c R14: 000000000000b3e3 R15: 00007fb5692c6180 [ 46.735789][ T3930] [ 46.757094][ T3962] kernel profiling enabled (shift: 7) [ 46.765870][ T3930] memory: usage 307200kB, limit 307200kB, failcnt 719 [ 46.766026][ T3930] memory+swap: usage 307644kB, limit 9007199254740988kB, failcnt 0 [ 46.766674][ T3930] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 46.766749][ T3930] Memory cgroup stats for /syz3: [ 46.770333][ T3930] cache 32768 [ 46.771223][ T3930] rss 0 [ 46.771240][ T3930] shmem 0 [ 46.771479][ T3930] mapped_file 0 [ 46.771504][ T3930] dirty 0 [ 46.771545][ T3930] writeback 0 [ 46.771630][ T3930] workingset_refault_anon 15 [ 46.771677][ T3930] workingset_refault_file 23 [ 46.771696][ T3930] swap 454656 [ 46.771712][ T3930] swapcached 524288 [ 46.771728][ T3930] pgpgin 10524 [ 46.771867][ T3930] pgpgout 10513 [ 46.771875][ T3930] pgfault 11656 [ 46.771883][ T3930] pgmajfault 9 [ 46.772791][ T3930] inactive_anon 8192 [ 46.772819][ T3930] active_anon 0 [ 46.772826][ T3930] inactive_file 32768 [ 46.772832][ T3930] active_file 4096 [ 46.772839][ T3930] unevictable 0 [ 46.773557][ T3930] hierarchical_memory_limit 314572800 [ 46.773708][ T3930] hierarchical_memsw_limit 9223372036854771712 [ 46.773817][ T3930] total_cache 32768 [ 46.773848][ T3930] total_rss 0 [ 46.774013][ T3930] total_shmem 0 [ 46.774020][ T3930] total_mapped_file 0 [ 46.774027][ T3930] total_dirty 0 [ 46.774033][ T3930] total_writeback 0 [ 46.774040][ T3930] total_workingset_refault_anon 15 [ 46.776645][ T3930] total_workingset_refault_file 23 [ 46.776737][ T3930] total_swap 454656 [ 46.776754][ T3930] total_swapcached 524288 [ 46.776784][ T3930] total_pgpgin 10524 [ 46.777079][ T3930] total_pgpgout 10513 [ 46.777096][ T3930] total_pgfault 11656 [ 46.777103][ T3930] total_pgmajfault 9 [ 46.777116][ T3930] total_inactive_anon 8192 [ 46.777124][ T3930] total_active_anon 0 [ 46.778943][ T3930] total_inactive_file 32768 [ 46.778962][ T3930] total_active_file 4096 [ 46.778970][ T3930] total_unevictable 0 [ 46.778978][ T3930] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.101,pid=3930,uid=0 [ 46.781856][ T3930] Memory cgroup out of memory: Killed process 3930 (syz.3.101) total-vm:96368kB, anon-rss:1252kB, file-rss:22536kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 46.819786][ T3933] syz.3.101 (3933) used greatest stack depth: 9240 bytes left [ 46.832142][ T3934] syz.3.101 (3934) used greatest stack depth: 8896 bytes left [ 46.998734][ T3949] Failed to initialize the IGMP autojoin socket (err -2) [ 47.163635][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.279441][ T3998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.126'. [ 48.279699][ T3998] FAULT_INJECTION: forcing a failure. [ 48.279699][ T3998] name failslab, interval 1, probability 0, space 0, times 0 [ 48.279722][ T3998] CPU: 0 UID: 0 PID: 3998 Comm: syz.3.126 Not tainted syzkaller #0 PREEMPT(lazy) [ 48.279751][ T3998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.279788][ T3998] Call Trace: [ 48.279796][ T3998] [ 48.279804][ T3998] __dump_stack+0x1d/0x30 [ 48.279831][ T3998] dump_stack_lvl+0x95/0xd0 [ 48.279853][ T3998] dump_stack+0x15/0x1b [ 48.279876][ T3998] should_fail_ex+0x262/0x280 [ 48.279915][ T3998] ? alloc_workqueue_va+0x61c/0x1630 [ 48.280009][ T3998] should_failslab+0x8c/0xb0 [ 48.280038][ T3998] __kmalloc_cache_node_noprof+0x81/0x420 [ 48.280074][ T3998] ? alloc_workqueue_va+0x61c/0x1630 [ 48.280188][ T3998] alloc_workqueue_va+0x61c/0x1630 [ 48.280204][ T3998] alloc_workqueue_noprof+0x84/0xb0 [ 48.280218][ T3998] ? should_fail_ex+0xdb/0x280 [ 48.280232][ T3998] bond_init+0x94/0x2a0 [ 48.280298][ T3998] register_netdevice+0x239/0x11a0 [ 48.280318][ T3998] bond_newlink+0x2f/0xb0 [ 48.280333][ T3998] ? __pfx_bond_newlink+0x10/0x10 [ 48.280421][ T3998] rtnl_newlink_create+0x1e4/0x4a0 [ 48.280488][ T3998] ? security_capable+0x7b/0x90 [ 48.280502][ T3998] ? netlink_ns_capable+0x86/0xa0 [ 48.280517][ T3998] rtnl_newlink+0x1255/0x1510 [ 48.280543][ T3998] ? lapic_next_event+0x11/0x20 [ 48.280586][ T3998] ? clockevents_program_event+0x2fd/0x340 [ 48.280605][ T3998] ? __memcg_slab_free_hook+0x154/0x340 [ 48.280719][ T3998] ? __rcu_read_unlock+0x4e/0x70 [ 48.280737][ T3998] ? avc_has_perm_noaudit+0xa3/0x120 [ 48.280782][ T3998] ? cred_has_capability+0x224/0x2a0 [ 48.280796][ T3998] ? selinux_capable+0x31/0x40 [ 48.280811][ T3998] ? security_capable+0x7b/0x90 [ 48.280872][ T3998] ? ns_capable+0x80/0xb0 [ 48.280900][ T3998] ? __pfx_rtnl_newlink+0x10/0x10 [ 48.280915][ T3998] rtnetlink_rcv_msg+0x64b/0x720 [ 48.280955][ T3998] netlink_rcv_skb+0x11e/0x220 [ 48.280978][ T3998] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 48.280996][ T3998] rtnetlink_rcv+0x1c/0x30 [ 48.281023][ T3998] netlink_unicast+0x5a9/0x680 [ 48.281045][ T3998] netlink_sendmsg+0x5be/0x6f0 [ 48.281083][ T3998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.281160][ T3998] ____sys_sendmsg+0x532/0x580 [ 48.281174][ T3998] ___sys_sendmsg+0x195/0x1e0 [ 48.281191][ T3998] __x64_sys_sendmsg+0xd4/0x160 [ 48.281204][ T3998] x64_sys_call+0x22ab/0x2550 [ 48.281250][ T3998] do_syscall_64+0x112/0x360 [ 48.281270][ T3998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.281397][ T3998] RIP: 0033:0x7fb56903e159 [ 48.281406][ T3998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.281417][ T3998] RSP: 002b:00007fb567a97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.281495][ T3998] RAX: ffffffffffffffda RBX: 00007fb5692c5fa0 RCX: 00007fb56903e159 [ 48.281503][ T3998] RDX: 0000000000004800 RSI: 0000200000000080 RDI: 0000000000000003 [ 48.281511][ T3998] RBP: 00007fb5690d506b R08: 0000000000000000 R09: 0000000000000000 [ 48.281519][ T3998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.281526][ T3998] R13: 00007fb5692c6038 R14: 00007fb5692c5fa0 R15: 00007ffc9717a9c8 [ 48.281537][ T3998] [ 48.537912][ T4013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.538060][ T4013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.771629][ T4039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'. [ 48.798976][ T4039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.825373][ T4039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.825972][ T4039] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 48.828940][ T4039] bond1: (slave ip_vti0): Error -95 calling set_mac_address [ 49.274443][ T4080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.275674][ T4080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.701878][ T4088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 49.848653][ T4102] loop0: detected capacity change from 0 to 256 [ 50.050808][ T4123] syz.3.172 uses obsolete (PF_INET,SOCK_PACKET) [ 50.199668][ T4135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.199741][ T4135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.376099][ T4151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.178'. [ 50.400951][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 50.400965][ T29] audit: type=1400 audit(1789794667.494:795): avc: denied { bind } for pid=4150 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.856614][ T29] audit: type=1400 audit(1789794667.504:796): avc: denied { setopt } for pid=4150 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.198641][ T4168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'. [ 51.217707][ T29] audit: type=1400 audit(1789794668.334:797): avc: denied { create } for pid=4170 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.219208][ T29] audit: type=1400 audit(1789794668.334:798): avc: denied { connect } for pid=4170 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.221669][ T29] audit: type=1400 audit(1789794668.334:799): avc: denied { write } for pid=4173 comm="syz.2.184" name="control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 51.227332][ T4168] hsr_slave_1 (unregistering): left promiscuous mode [ 51.322790][ T4174] device-mapper: table: 252:0: thin-pool: unknown target type [ 51.322815][ T4174] device-mapper: ioctl: error adding target to table [ 51.435655][ T4202] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4202 comm=syz.1.187 [ 52.262323][ T4239] Failed to initialize the IGMP autojoin socket (err -2) [ 52.267622][ T4240] ±ÿ)”ëfl: renamed from lo (while UP) [ 52.361612][ T4252] loop4: detected capacity change from 0 to 512 [ 52.366827][ T4252] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.437127][ T4252] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #2: block 8: comm syz.4.196: lblock 0 mapped to illegal pblock 8 (length 1) [ 52.437198][ T4252] fserror_report: 1 callbacks suppressed [ 52.437210][ T4252] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 52.437402][ T4252] EXT4-fs (loop4): Remounting filesystem read-only [ 52.437419][ T4252] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.196: error -EUCLEAN reading directory block [ 52.437473][ T4252] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 52.437503][ T4252] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.196: error -EUCLEAN reading directory block [ 52.437533][ T4252] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 52.437902][ T4252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.444485][ T29] audit: type=1400 audit(1789794669.564:800): avc: denied { write } for pid=4248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.508389][ T29] audit: type=1400 audit(1789794669.624:801): avc: denied { write } for pid=4265 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.765136][ T4270] loop2: detected capacity change from 0 to 512 [ 52.796505][ T4270] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.796707][ T4270] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 53.297610][ T4313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 53.344165][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.520890][ T4319] usb usb7: check_ctrlrecip: process 4319 (syz.0.211) requesting ep 01 but needs 81 [ 53.521076][ T4319] vhci_hcd vhci_hcd.3: default hub control req: 0211 v0005 i0001 l0 [ 53.672885][ T29] audit: type=1400 audit(1789794670.774:802): avc: denied { mount } for pid=4316 comm="syz.4.202" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.726699][ T4321] loop4: detected capacity change from 0 to 512 [ 53.741857][ T4321] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.741902][ T4321] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 53.921663][ T4321] loop4: detected capacity change from 0 to 764 [ 53.934987][ T29] audit: type=1400 audit(1789794671.054:803): avc: denied { mount } for pid=4316 comm="syz.4.202" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 53.985685][ T29] audit: type=1400 audit(1789794671.104:804): avc: denied { write } for pid=4306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.274737][ T4340] FAULT_INJECTION: forcing a failure. [ 54.274737][ T4340] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.274771][ T4340] CPU: 1 UID: 0 PID: 4340 Comm: syz.0.207 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.274803][ T4340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.274818][ T4340] Call Trace: [ 54.274874][ T4340] [ 54.274881][ T4340] __dump_stack+0x1d/0x30 [ 54.274904][ T4340] dump_stack_lvl+0x95/0xd0 [ 54.274929][ T4340] dump_stack+0x15/0x1b [ 54.274954][ T4340] should_fail_ex+0x262/0x280 [ 54.274981][ T4340] should_fail+0xb/0x20 [ 54.275048][ T4340] should_fail_usercopy+0x1a/0x20 [ 54.275073][ T4340] _copy_from_iter+0xcc/0xe70 [ 54.275100][ T4340] ? __alloc_skb+0x516/0x6f0 [ 54.275135][ T4340] ? __alloc_skb+0x209/0x6f0 [ 54.275212][ T4340] netlink_sendmsg+0x4a4/0x6f0 [ 54.275303][ T4340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.275387][ T4340] __sys_sendto+0x411/0x470 [ 54.275490][ T4340] __x64_sys_sendto+0x76/0x90 [ 54.275521][ T4340] x64_sys_call+0x200c/0x2550 [ 54.275552][ T4340] do_syscall_64+0x112/0x360 [ 54.275593][ T4340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.275615][ T4340] RIP: 0033:0x7f5db790e98e [ 54.275631][ T4340] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 54.275730][ T4340] RSP: 002b:00007f5db63a5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 54.275752][ T4340] RAX: ffffffffffffffda RBX: 00007f5db63a76c0 RCX: 00007f5db790e98e [ 54.275768][ T4340] RDX: 0000000000000020 RSI: 00007f5db63a6000 RDI: 0000000000000005 [ 54.275811][ T4340] RBP: 0000000000000000 R08: 00007f5db63a5f04 R09: 000000000000000c [ 54.275824][ T4340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 54.275837][ T4340] R13: 00007f5db63a5f58 R14: 00007f5db63a6000 R15: 0000000000000000 [ 54.275857][ T4340] [ 54.921612][ T4353] FAULT_INJECTION: forcing a failure. [ 54.921612][ T4353] name failslab, interval 1, probability 0, space 0, times 0 [ 54.921711][ T4353] CPU: 0 UID: 0 PID: 4353 Comm: syz.2.212 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.921738][ T4353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.921750][ T4353] Call Trace: [ 54.921756][ T4353] [ 54.921762][ T4353] __dump_stack+0x1d/0x30 [ 54.921807][ T4353] dump_stack_lvl+0x95/0xd0 [ 54.921828][ T4353] dump_stack+0x15/0x1b [ 54.921847][ T4353] should_fail_ex+0x262/0x280 [ 54.921941][ T4353] ? skb_clone+0x151/0x1f0 [ 54.921963][ T4353] should_failslab+0x8c/0xb0 [ 54.921995][ T4353] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 54.922074][ T4353] ? skb_clone+0x151/0x1f0 [ 54.922145][ T4353] skb_clone+0x151/0x1f0 [ 54.922169][ T4353] __netlink_deliver_tap+0x2be/0x510 [ 54.922211][ T4353] netlink_sendskb+0x126/0x150 [ 54.922304][ T4353] netlink_unicast+0x287/0x680 [ 54.922332][ T4353] netlink_ack+0x4fe/0x530 [ 54.922362][ T4353] netlink_rcv_skb+0x18d/0x220 [ 54.922469][ T4353] ? __pfx_genl_rcv_msg+0x10/0x10 [ 54.922497][ T4353] genl_rcv+0x28/0x40 [ 54.922596][ T4353] netlink_unicast+0x5a9/0x680 [ 54.922680][ T4353] netlink_sendmsg+0x5be/0x6f0 [ 54.922717][ T4353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.922749][ T4353] __sys_sendto+0x411/0x470 [ 54.922827][ T4353] __x64_sys_sendto+0x76/0x90 [ 54.922862][ T4353] x64_sys_call+0x200c/0x2550 [ 54.922887][ T4353] do_syscall_64+0x112/0x360 [ 54.922975][ T4353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.922997][ T4353] RIP: 0033:0x7f0cd5d1e98e [ 54.923012][ T4353] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 54.923029][ T4353] RSP: 002b:00007f0cd47b5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 54.923053][ T4353] RAX: ffffffffffffffda RBX: 00007f0cd47b76c0 RCX: 00007f0cd5d1e98e [ 54.923134][ T4353] RDX: 0000000000000020 RSI: 00007f0cd47b6000 RDI: 0000000000000007 [ 54.923150][ T4353] RBP: 0000000000000000 R08: 00007f0cd47b5f04 R09: 000000000000000c [ 54.923165][ T4353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 54.923226][ T4353] R13: 00007f0cd47b5f58 R14: 00007f0cd47b6000 R15: 0000000000000000 [ 54.923244][ T4353] [ 54.936389][ T4351] loop4: detected capacity change from 0 to 512 [ 55.036917][ T4351] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.097467][ T4351] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #2: block 8: comm syz.4.210: lblock 0 mapped to illegal pblock 8 (length 1) [ 55.097576][ T4351] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 55.097779][ T4351] EXT4-fs (loop4): Remounting filesystem read-only [ 55.097858][ T4351] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.210: error -EUCLEAN reading directory block [ 55.097969][ T4351] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 55.098016][ T4351] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.210: error -EUCLEAN reading directory block [ 55.098067][ T4351] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 55.099522][ T4351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.266734][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.304322][ T4365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'. [ 55.322647][ T4365] hsr_slave_1 (unregistering): left promiscuous mode [ 55.632773][ T4386] usb usb7: check_ctrlrecip: process 4386 (syz.4.218) requesting ep 01 but needs 81 [ 55.632969][ T4386] vhci_hcd vhci_hcd.3: default hub control req: 0211 v0005 i0001 l0 [ 56.081499][ T4393] loop3: detected capacity change from 0 to 512 [ 56.089007][ T4393] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.100634][ T4393] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #2: block 8: comm syz.3.225: lblock 0 mapped to illegal pblock 8 (length 1) [ 56.100688][ T4393] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 56.101259][ T4393] EXT4-fs (loop3): Remounting filesystem read-only [ 56.101288][ T4393] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.225: error -EUCLEAN reading directory block [ 56.101341][ T4393] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 56.101388][ T4393] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.225: error -EUCLEAN reading directory block [ 56.101502][ T4393] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 56.116079][ T4393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.161616][ T4388] cgroup: fork rejected by pids controller in /syz2 [ 56.235822][ T4494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.226'. [ 56.286459][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 56.286473][ T29] audit: type=1400 audit(1789794673.404:807): avc: denied { write } for pid=4399 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.334260][ T29] audit: type=1400 audit(1789794673.454:808): avc: denied { write } for pid=4513 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.403018][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.425811][ T4519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.229'. [ 56.431879][ T4529] loop3: detected capacity change from 0 to 1764 [ 56.448180][ T4529] iso9660: Bad value for 'gid' [ 56.448197][ T4529] iso9660: Bad value for 'gid' [ 56.461610][ T4519] hsr_slave_1 (unregistering): left promiscuous mode [ 56.477307][ T4529] loop3: detected capacity change from 0 to 1024 [ 56.481309][ T4529] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 56.500034][ T4529] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.232: lblock 2 mapped to illegal pblock 2 (length 1) [ 56.500072][ T4529] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 56.500140][ T4529] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 56.500203][ T4529] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 48: comm syz.3.232: lblock 0 mapped to illegal pblock 48 (length 1) [ 56.500231][ T4529] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 56.500361][ T4529] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 56.500377][ T4529] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.232: Failed to acquire dquot type 0 [ 56.500396][ T4529] loop3: lost filesystem error report for type 5 error -117 [ 56.500465][ T4529] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 56.500522][ T4529] loop3: lost filesystem error report for type 5 error -117 [ 56.500601][ T4529] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.232: mark_inode_dirty error [ 56.500639][ T4529] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.500701][ T4529] EXT4-fs warning (device loop3): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 56.500727][ T4529] EXT4-fs (loop3): 1 orphan inode deleted [ 56.512326][ T42] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 56.512384][ T42] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 56.516374][ T42] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 56.516523][ T42] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:2: Failed to release dquot type 0 [ 56.516679][ T42] loop3: lost filesystem error report for type 5 error -117 [ 56.551087][ T4529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.583055][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.583367][ T3306] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 56.583393][ T3306] loop3: lost filesystem error report for type 5 error -117 [ 56.583480][ T3306] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 56.583498][ T3306] loop3: lost filesystem error report for type 5 error -117 [ 56.583550][ T3306] EXT4-fs error (device loop3): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 56.583609][ T3306] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 56.583672][ T3306] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 56.583693][ T3306] loop3: lost filesystem error report for type 5 error -117 [ 56.599537][ T29] audit: type=1400 audit(1789794673.714:809): avc: denied { write } for pid=4520 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.629081][ T807] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.710295][ T29] audit: type=1400 audit(1789794673.824:810): avc: denied { write } for pid=4543 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.712391][ T807] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.880348][ T807] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.929896][ T807] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.060594][ T4558] Failed to initialize the IGMP autojoin socket (err -2) [ 57.127356][ T807] bridge_slave_1: left allmulticast mode [ 57.127377][ T807] bridge_slave_1: left promiscuous mode [ 57.127511][ T807] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.128109][ T807] bridge_slave_0: left allmulticast mode [ 57.128124][ T807] bridge_slave_0: left promiscuous mode [ 57.128217][ T807] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.213748][ T4573] usb usb7: check_ctrlrecip: process 4573 (syz.4.239) requesting ep 01 but needs 81 [ 57.213784][ T4573] vhci_hcd vhci_hcd.3: default hub control req: 0211 v0005 i0001 l0 [ 57.640887][ T807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.657539][ T807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.658971][ T807] bond0 (unregistering): Released all slaves [ 57.678538][ T807] bond1 (unregistering): Released all slaves [ 57.986024][ T11] infiniband syz2: ib_query_port failed (-19) [ 58.085856][ T4584] loop4: detected capacity change from 0 to 512 [ 58.092326][ T4584] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.097944][ T4584] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #2: block 8: comm syz.4.242: lblock 0 mapped to illegal pblock 8 (length 1) [ 58.098063][ T4584] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 58.098315][ T4584] EXT4-fs (loop4): Remounting filesystem read-only [ 58.098330][ T4584] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.242: error -EUCLEAN reading directory block [ 58.098430][ T4584] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 58.098479][ T4584] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.242: error -EUCLEAN reading directory block [ 58.098524][ T4584] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 58.104701][ T4584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.147536][ T807] hsr_slave_0: left promiscuous mode [ 58.154597][ T807] hsr_slave_1: left promiscuous mode [ 58.155089][ T807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.155104][ T807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.162490][ T807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.162506][ T807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.201135][ T807] veth1_macvtap: left promiscuous mode [ 58.201232][ T807] veth0_macvtap: left promiscuous mode [ 58.201333][ T807] veth1_vlan: left promiscuous mode [ 58.201365][ T807] veth0_vlan: left promiscuous mode [ 58.275081][ T29] audit: type=1400 audit(1789794675.394:811): avc: denied { write } for pid=4593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.304855][ T29] audit: type=1400 audit(1789794675.414:812): avc: denied { write } for pid=4609 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.372986][ T4558] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.373015][ T4558] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.373126][ T4558] bridge_slave_0: entered allmulticast mode [ 58.373657][ T4558] bridge_slave_0: entered promiscuous mode [ 58.375193][ T4558] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.375295][ T4558] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.375330][ T4558] bridge_slave_1: entered allmulticast mode [ 58.375694][ T4558] bridge_slave_1: entered promiscuous mode [ 58.418195][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.451415][ T4558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.468185][ T4558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.485151][ T4618] FAULT_INJECTION: forcing a failure. [ 58.485151][ T4618] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 58.485197][ T4618] CPU: 1 UID: 0 PID: 4618 Comm: syz.4.244 Not tainted syzkaller #0 PREEMPT(lazy) [ 58.485225][ T4618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.485239][ T4618] Call Trace: [ 58.485247][ T4618] [ 58.485255][ T4618] __dump_stack+0x1d/0x30 [ 58.485307][ T4618] dump_stack_lvl+0x95/0xd0 [ 58.485332][ T4618] dump_stack+0x15/0x1b [ 58.485356][ T4618] should_fail_ex+0x262/0x280 [ 58.485388][ T4618] should_fail_alloc_page+0xf2/0x100 [ 58.485490][ T4618] __alloc_frozen_pages_noprof+0x157/0x400 [ 58.485563][ T4618] alloc_pages_mpol+0xaf/0x1d0 [ 58.485589][ T4618] alloc_pages_noprof+0x94/0x140 [ 58.485613][ T4618] pte_alloc_one+0x1c/0xc0 [ 58.485632][ T4618] handle_mm_fault+0x20d5/0x3bb0 [ 58.485729][ T4618] ? vma_is_secretmem+0x16/0x30 [ 58.485752][ T4618] __get_user_pages+0x12e9/0x1eb0 [ 58.485844][ T4618] __mm_populate+0x242/0x390 [ 58.485870][ T4618] vm_mmap_pgoff+0x23b/0x2d0 [ 58.485898][ T4618] ksys_mmap_pgoff+0xc1/0x310 [ 58.485992][ T4618] ? __x64_sys_mmap+0x49/0x70 [ 58.486024][ T4618] x64_sys_call+0x23b3/0x2550 [ 58.486049][ T4618] do_syscall_64+0x112/0x360 [ 58.486095][ T4618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.486122][ T4618] RIP: 0033:0x7f4f6164e159 [ 58.486147][ T4618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.486166][ T4618] RSP: 002b:00007f4f600a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 58.486192][ T4618] RAX: ffffffffffffffda RBX: 00007f4f618d5fa0 RCX: 00007f4f6164e159 [ 58.486208][ T4618] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 58.486223][ T4618] RBP: 00007f4f616e506b R08: ffffffffffffffff R09: 0000000000000000 [ 58.486242][ T4618] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 58.486257][ T4618] R13: 00007f4f618d6038 R14: 00007f4f618d5fa0 R15: 00007ffcd8d82188 [ 58.486278][ T4618] [ 58.490956][ T4616] loop0: detected capacity change from 0 to 512 [ 58.493792][ T4616] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.497228][ T4616] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #2: block 8: comm syz.0.255: lblock 0 mapped to illegal pblock 8 (length 1) [ 58.497318][ T4616] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 58.497557][ T4616] EXT4-fs (loop0): Remounting filesystem read-only [ 58.497571][ T4616] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.255: error -EUCLEAN reading directory block [ 58.497622][ T4616] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 58.497666][ T4616] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.255: error -EUCLEAN reading directory block [ 58.497715][ T4616] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 58.499202][ T4616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.521691][ T4558] team0: Port device team_slave_0 added [ 58.547288][ T4558] team0: Port device team_slave_1 added [ 58.633238][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.637183][ T4558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.637196][ T4558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.637235][ T4558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.637709][ T4558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.637721][ T4558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.637919][ T4558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.678918][ T4558] hsr_slave_0: entered promiscuous mode [ 58.679283][ T4558] hsr_slave_1: entered promiscuous mode [ 58.680331][ T4558] debugfs: 'hsr0' already exists in 'hsr' [ 58.680346][ T4558] Cannot create hsr debugfs directory [ 59.033094][ T4639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.246'. [ 59.197621][ T4646] loop0: detected capacity change from 0 to 512 [ 59.201104][ T4646] EXT4-fs: Ignoring removed oldalloc option [ 59.205098][ T4646] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 59.210016][ T4646] EXT4-fs (loop0): orphan cleanup on readonly fs [ 59.211275][ T4646] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.246: bg 0: block 16: invalid block bitmap [ 59.211396][ T4646] loop0: lost filesystem error report for type 5 error -117 [ 59.211884][ T4646] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 59.212184][ T4646] loop0: lost filesystem error report for type 5 error -117 [ 59.212615][ T4646] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.246: attempt to clear invalid blocks 1669132790 len 1 [ 59.212734][ T4646] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 59.213800][ T4646] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.246: invalid indirect mapped block 4294967295 (level 1) [ 59.213898][ T4646] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 59.214322][ T4646] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.246: invalid indirect mapped block 4294967295 (level 2) [ 59.214383][ T4646] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 59.215821][ T4646] EXT4-fs (loop0): 1 truncate cleaned up [ 59.220781][ T4646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 59.364286][ T29] audit: type=1400 audit(1789794676.484:813): avc: denied { write } for pid=4640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.491880][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.521329][ T4665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 59.553617][ T4665] hsr_slave_1 (unregistering): left promiscuous mode [ 59.575852][ T4558] netdevsim netdevsim2 netdevsim0: renamed from eth1 [ 59.579870][ T4558] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.589193][ T4558] netdevsim netdevsim2 netdevsim1: renamed from eth2 [ 59.594802][ T4558] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.600831][ T4558] netdevsim netdevsim2 netdevsim2: renamed from eth3 [ 59.610445][ T4558] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.612372][ T4558] netdevsim netdevsim2 netdevsim3: renamed from eth4 [ 59.624725][ T4558] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.660775][ T4667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'. [ 59.727493][ T4678] usb usb7: check_ctrlrecip: process 4678 (syz.0.253) requesting ep 01 but needs 81 [ 59.727571][ T4678] vhci_hcd vhci_hcd.3: default hub control req: 0211 v0005 i0001 l0 [ 59.772210][ T4676] FAULT_INJECTION: forcing a failure. [ 59.772210][ T4676] name failslab, interval 1, probability 0, space 0, times 0 [ 59.772236][ T4676] CPU: 1 UID: 0 PID: 4676 Comm: syz.3.252 Not tainted syzkaller #0 PREEMPT(lazy) [ 59.772338][ T4676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.772349][ T4676] Call Trace: [ 59.772355][ T4676] [ 59.772361][ T4676] __dump_stack+0x1d/0x30 [ 59.772450][ T4676] dump_stack_lvl+0x95/0xd0 [ 59.772476][ T4676] dump_stack+0x15/0x1b [ 59.772497][ T4676] should_fail_ex+0x262/0x280 [ 59.772520][ T4676] ? skb_clone+0x151/0x1f0 [ 59.772542][ T4676] should_failslab+0x8c/0xb0 [ 59.772654][ T4676] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 59.772694][ T4676] ? skb_clone+0x151/0x1f0 [ 59.772759][ T4676] skb_clone+0x151/0x1f0 [ 59.772781][ T4676] __netlink_deliver_tap+0x2be/0x510 [ 59.772816][ T4676] netlink_sendskb+0x126/0x150 [ 59.772869][ T4676] netlink_unicast+0x287/0x680 [ 59.772895][ T4676] ctrl_getfamily+0x373/0x3b0 [ 59.772915][ T4676] genl_family_rcv_msg_doit+0x187/0x1f0 [ 59.772941][ T4676] genl_rcv_msg+0x42f/0x470 [ 59.773018][ T4676] ? __pfx_ctrl_getfamily+0x10/0x10 [ 59.773051][ T4676] netlink_rcv_skb+0x11e/0x220 [ 59.773079][ T4676] ? __pfx_genl_rcv_msg+0x10/0x10 [ 59.773105][ T4676] genl_rcv+0x28/0x40 [ 59.773123][ T4676] netlink_unicast+0x5a9/0x680 [ 59.773190][ T4676] netlink_sendmsg+0x5be/0x6f0 [ 59.773227][ T4676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.773329][ T4676] __sys_sendto+0x411/0x470 [ 59.773437][ T4676] __x64_sys_sendto+0x76/0x90 [ 59.773552][ T4676] x64_sys_call+0x200c/0x2550 [ 59.773581][ T4676] do_syscall_64+0x112/0x360 [ 59.773644][ T4676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.773666][ T4676] RIP: 0033:0x7fb568ffe98e [ 59.773688][ T4676] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 59.773706][ T4676] RSP: 002b:00007fb567a95e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 59.773739][ T4676] RAX: ffffffffffffffda RBX: 00007fb567a976c0 RCX: 00007fb568ffe98e [ 59.773753][ T4676] RDX: 0000000000000020 RSI: 00007fb567a96000 RDI: 0000000000000007 [ 59.773766][ T4676] RBP: 0000000000000000 R08: 00007fb567a95f04 R09: 000000000000000c [ 59.773778][ T4676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 59.773799][ T4676] R13: 00007fb567a95f58 R14: 00007fb567a96000 R15: 0000000000000000 [ 59.773817][ T4676] [ 59.884470][ T4558] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.902435][ T860] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.902472][ T860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.937255][ T860] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.937349][ T860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.026616][ T4686] loop0: detected capacity change from 0 to 512 [ 60.028291][ T4686] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 60.028320][ T4686] System zones: 1-12 [ 60.031430][ T4686] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.257: missing EA_INODE flag [ 60.031454][ T4686] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 60.034664][ T4686] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.257: error while reading EA inode 12 err=-117 [ 60.034768][ T4686] loop0: lost filesystem error report for type 5 error -117 [ 60.037694][ T4686] EXT4-fs (loop0): 1 orphan inode deleted [ 60.038286][ T4686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.169821][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.253356][ T4691] loop3: detected capacity change from 0 to 512 [ 60.254064][ T4691] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.262989][ T4691] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #2: block 8: comm syz.3.258: lblock 0 mapped to illegal pblock 8 (length 1) [ 60.263034][ T4691] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 60.263664][ T4691] EXT4-fs (loop3): Remounting filesystem read-only [ 60.263744][ T4691] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.258: error -EUCLEAN reading directory block [ 60.263786][ T4691] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 60.263822][ T4691] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.258: error -EUCLEAN reading directory block [ 60.263888][ T4691] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 60.264532][ T4691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.404304][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.431082][ T4558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.512058][ T4715] loop4: detected capacity change from 0 to 512 [ 60.514019][ T4715] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.517500][ T4715] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #2: block 8: comm syz.4.262: lblock 0 mapped to illegal pblock 8 (length 1) [ 60.517560][ T4715] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 60.518421][ T4715] EXT4-fs (loop4): Remounting filesystem read-only [ 60.518451][ T4715] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.262: error -EUCLEAN reading directory block [ 60.518568][ T4715] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 60.518683][ T4715] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.262: error -EUCLEAN reading directory block [ 60.518769][ T4715] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 60.519328][ T4715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.532029][ T4721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'. [ 60.634109][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.699568][ T4558] veth0_vlan: entered promiscuous mode [ 60.701625][ T4558] veth1_vlan: entered promiscuous mode [ 60.843376][ T4558] veth0_macvtap: entered promiscuous mode [ 60.865280][ T4558] veth1_macvtap: entered promiscuous mode [ 61.006183][ T4558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.012787][ T4752] Failed to initialize the IGMP autojoin socket (err -2) [ 61.048343][ T4558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.090060][ T4558] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 61.108359][ T4558] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 61.130919][ T4558] wireguard: wg0: Could not create IPv4 socket [ 61.144101][ T4558] wireguard: wg1: Could not create IPv4 socket [ 61.147262][ T4558] wireguard: wg2: Could not create IPv4 socket [ 61.257482][ T4757] FAULT_INJECTION: forcing a failure. [ 61.257482][ T4757] name failslab, interval 1, probability 0, space 0, times 0 [ 61.257591][ T4757] CPU: 0 UID: 0 PID: 4757 Comm: syz.3.266 Not tainted syzkaller #0 PREEMPT(lazy) [ 61.257615][ T4757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.257691][ T4757] Call Trace: [ 61.257698][ T4757] [ 61.257705][ T4757] __dump_stack+0x1d/0x30 [ 61.257734][ T4757] dump_stack_lvl+0x95/0xd0 [ 61.257756][ T4757] dump_stack+0x15/0x1b [ 61.257845][ T4757] should_fail_ex+0x262/0x280 [ 61.257880][ T4757] ? security_inode_alloc+0x37/0x100 [ 61.257972][ T4757] should_failslab+0x8c/0xb0 [ 61.258001][ T4757] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 61.258067][ T4757] ? security_inode_alloc+0x37/0x100 [ 61.258092][ T4757] ? inode_init_always_gfp+0x3f2/0x4e0 [ 61.258112][ T4757] security_inode_alloc+0x37/0x100 [ 61.258149][ T4757] inode_init_always_gfp+0x495/0x4e0 [ 61.258168][ T4757] ? __pfx_sock_alloc_inode+0x10/0x10 [ 61.258193][ T4757] alloc_inode+0x58/0x170 [ 61.258254][ T4757] __sock_create+0x121/0x580 [ 61.258282][ T4757] __sys_socket+0xaf/0x180 [ 61.258308][ T4757] __x64_sys_socket+0x3f/0x50 [ 61.258365][ T4757] x64_sys_call+0x246e/0x2550 [ 61.258389][ T4757] do_syscall_64+0x112/0x360 [ 61.258458][ T4757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.258523][ T4757] RIP: 0033:0x7fb56903f9c7 [ 61.258538][ T4757] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.258603][ T4757] RSP: 002b:00007fb567a95f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 61.258621][ T4757] RAX: ffffffffffffffda RBX: 00007fb5692c5fa0 RCX: 00007fb56903f9c7 [ 61.258635][ T4757] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 61.258717][ T4757] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 61.258729][ T4757] R10: 0000200000000040 R11: 0000000000000286 R12: 0000000000000000 [ 61.258818][ T4757] R13: 00007fb5692c6038 R14: 00007fb5692c5fa0 R15: 00007ffc9717a9c8 [ 61.258835][ T4757] [ 61.258877][ T4757] socket: no more sockets [ 61.833908][ T4759] Failed to initialize the IGMP autojoin socket (err -2) [ 61.983918][ T4779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 62.153421][ T4792] loop1: detected capacity change from 0 to 512 [ 62.153980][ T4792] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.157830][ T4792] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #2: block 8: comm syz.1.271: lblock 0 mapped to illegal pblock 8 (length 1) [ 62.157863][ T4792] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 62.158011][ T4792] EXT4-fs (loop1): Remounting filesystem read-only [ 62.158026][ T4792] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.271: error -EUCLEAN reading directory block [ 62.158108][ T4792] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 62.158133][ T4792] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.271: error -EUCLEAN reading directory block [ 62.158158][ T4792] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 62.158513][ T4792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.303245][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 62.303266][ T29] audit: type=1400 audit(1789794679.424:821): avc: denied { write } for pid=4790 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.488841][ T29] audit: type=1400 audit(1789794679.604:822): avc: denied { write } for pid=4807 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.665275][ T4811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 62.722996][ T4824] FAULT_INJECTION: forcing a failure. [ 62.722996][ T4824] name failslab, interval 1, probability 0, space 0, times 0 [ 62.723087][ T4824] CPU: 1 UID: 0 PID: 4824 Comm: syz.2.276 Not tainted syzkaller #0 PREEMPT(lazy) [ 62.723111][ T4824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.723123][ T4824] Call Trace: [ 62.723130][ T4824] [ 62.723138][ T4824] __dump_stack+0x1d/0x30 [ 62.723198][ T4824] dump_stack_lvl+0x95/0xd0 [ 62.723219][ T4824] dump_stack+0x15/0x1b [ 62.723240][ T4824] should_fail_ex+0x262/0x280 [ 62.723268][ T4824] ? __alloc_skb+0x2e0/0x6f0 [ 62.723325][ T4824] should_failslab+0x8c/0xb0 [ 62.723355][ T4824] kmem_cache_alloc_node_noprof+0x82/0x400 [ 62.723385][ T4824] ? __alloc_skb+0x2e0/0x6f0 [ 62.723491][ T4824] __alloc_skb+0x2e0/0x6f0 [ 62.723584][ T4824] ? __alloc_skb+0x209/0x6f0 [ 62.723617][ T4824] ctrl_getfamily+0x2c2/0x3b0 [ 62.723643][ T4824] genl_family_rcv_msg_doit+0x187/0x1f0 [ 62.723736][ T4824] genl_rcv_msg+0x42f/0x470 [ 62.723761][ T4824] ? __pfx_ctrl_getfamily+0x10/0x10 [ 62.723803][ T4824] netlink_rcv_skb+0x11e/0x220 [ 62.723835][ T4824] ? __pfx_genl_rcv_msg+0x10/0x10 [ 62.723894][ T4824] genl_rcv+0x28/0x40 [ 62.723916][ T4824] netlink_unicast+0x5a9/0x680 [ 62.723948][ T4824] netlink_sendmsg+0x5be/0x6f0 [ 62.724041][ T4824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.724078][ T4824] __sys_sendto+0x411/0x470 [ 62.724200][ T4824] __x64_sys_sendto+0x76/0x90 [ 62.724296][ T4824] x64_sys_call+0x200c/0x2550 [ 62.724324][ T4824] do_syscall_64+0x112/0x360 [ 62.724478][ T4824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.724502][ T4824] RIP: 0033:0x7f017909e98e [ 62.724525][ T4824] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 62.724602][ T4824] RSP: 002b:00007f0177b35e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 62.724622][ T4824] RAX: ffffffffffffffda RBX: 00007f0177b376c0 RCX: 00007f017909e98e [ 62.724636][ T4824] RDX: 0000000000000020 RSI: 00007f0177b36000 RDI: 0000000000000007 [ 62.724652][ T4824] RBP: 0000000000000000 R08: 00007f0177b35f04 R09: 000000000000000c [ 62.724667][ T4824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 62.724681][ T4824] R13: 00007f0177b35f58 R14: 00007f0177b36000 R15: 0000000000000000 [ 62.724735][ T4824] [ 62.771978][ T29] audit: type=1400 audit(1789794679.854:823): avc: denied { write } for pid=4812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.772083][ T29] audit: type=1400 audit(1789794679.874:824): avc: denied { write } for pid=4829 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.950952][ T29] audit: type=1400 audit(1789794680.064:825): avc: denied { write } for pid=4833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.989546][ T29] audit: type=1400 audit(1789794680.104:826): avc: denied { write } for pid=4848 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.029505][ T29] audit: type=1400 audit(1789794680.124:827): avc: denied { create } for pid=4820 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.141814][ T4823] Failed to initialize the IGMP autojoin socket (err -2) [ 63.187895][ T29] audit: type=1400 audit(1789794680.284:828): avc: denied { write } for pid=4852 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.242547][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.265787][ T29] audit: type=1400 audit(1789794680.384:829): avc: denied { write } for pid=4873 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.638634][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 63.691942][ T29] audit: type=1400 audit(1789794680.804:830): avc: denied { write } for pid=4883 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.978026][ T4921] loop3: detected capacity change from 0 to 256 [ 64.763634][ T5011] loop1: detected capacity change from 0 to 512 [ 64.764264][ T5011] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.778581][ T5011] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #2: block 8: comm syz.1.290: lblock 0 mapped to illegal pblock 8 (length 1) [ 64.778671][ T5011] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 64.785216][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 64.785236][ C1] EXT4-fs (loop1): initial error at time 1789794681: ext4_map_blocks:790: inode 2: block 8 [ 64.785288][ C1] EXT4-fs (loop1): last error at time 1789794681: ext4_map_blocks:790: inode 2: block 8 [ 64.800337][ T5011] EXT4-fs (loop1): Remounting filesystem read-only [ 64.800356][ T5011] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.290: error -EUCLEAN reading directory block [ 64.800397][ T5011] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 64.800430][ T5011] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.290: error -EUCLEAN reading directory block [ 64.800460][ T5011] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 64.800829][ T5011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.157769][ T5039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'. [ 65.242931][ T5052] Failed to initialize the IGMP autojoin socket (err -2) [ 65.563510][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.641757][ T5093] FAULT_INJECTION: forcing a failure. [ 65.641757][ T5093] name failslab, interval 1, probability 0, space 0, times 0 [ 65.641865][ T5093] CPU: 0 UID: 0 PID: 5093 Comm: syz.1.301 Not tainted syzkaller #0 PREEMPT(lazy) [ 65.641892][ T5093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.641909][ T5093] Call Trace: [ 65.641915][ T5093] [ 65.641923][ T5093] __dump_stack+0x1d/0x30 [ 65.641951][ T5093] dump_stack_lvl+0x95/0xd0 [ 65.642009][ T5093] dump_stack+0x15/0x1b [ 65.642038][ T5093] should_fail_ex+0x262/0x280 [ 65.642076][ T5093] ? nfc_genl_rcv_nl_event+0x6f/0x130 [ 65.642150][ T5093] should_failslab+0x8c/0xb0 [ 65.642181][ T5093] __kmalloc_cache_noprof+0x7a/0x400 [ 65.642215][ T5093] ? nfc_genl_rcv_nl_event+0x6f/0x130 [ 65.642240][ T5093] ? __pfx_nfc_genl_rcv_nl_event+0x10/0x10 [ 65.642272][ T5093] nfc_genl_rcv_nl_event+0x6f/0x130 [ 65.642293][ T5093] blocking_notifier_call_chain+0x9b/0x1e0 [ 65.642324][ T5093] netlink_release+0xa9c/0xf00 [ 65.642422][ T5093] __sock_release+0x65/0x150 [ 65.642453][ T5093] ? __pfx_sock_close+0x10/0x10 [ 65.642482][ T5093] sock_close+0x19/0x30 [ 65.642544][ T5093] __fput+0x29e/0x630 [ 65.642571][ T5093] fput_close_sync+0xad/0x190 [ 65.642599][ T5093] __x64_sys_close+0x55/0xf0 [ 65.642627][ T5093] x64_sys_call+0x812/0x2550 [ 65.642673][ T5093] do_syscall_64+0x112/0x360 [ 65.642777][ T5093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.642801][ T5093] RIP: 0033:0x7fe02fd8e98e [ 65.642888][ T5093] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 65.642908][ T5093] RSP: 002b:00007fe02e825f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 65.642991][ T5093] RAX: ffffffffffffffda RBX: 00007fe02e8276c0 RCX: 00007fe02fd8e98e [ 65.643005][ T5093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 65.643016][ T5093] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000000 [ 65.643030][ T5093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.643086][ T5093] R13: 00007fe030056038 R14: 00007fe030055fa0 R15: 00007fffc76f5d68 [ 65.643104][ T5093] [ 66.195421][ T5156] FAULT_INJECTION: forcing a failure. [ 66.195421][ T5156] name failslab, interval 1, probability 0, space 0, times 0 [ 66.195453][ T5156] CPU: 1 UID: 0 PID: 5156 Comm: syz.1.305 Not tainted syzkaller #0 PREEMPT(lazy) [ 66.195544][ T5156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.195564][ T5156] Call Trace: [ 66.195571][ T5156] [ 66.195579][ T5156] __dump_stack+0x1d/0x30 [ 66.195607][ T5156] dump_stack_lvl+0x95/0xd0 [ 66.195632][ T5156] dump_stack+0x15/0x1b [ 66.195769][ T5156] should_fail_ex+0x262/0x280 [ 66.195799][ T5156] ? __alloc_skb+0x2e0/0x6f0 [ 66.195834][ T5156] should_failslab+0x8c/0xb0 [ 66.195894][ T5156] kmem_cache_alloc_node_noprof+0x82/0x400 [ 66.195929][ T5156] ? __alloc_skb+0x2e0/0x6f0 [ 66.195964][ T5156] __alloc_skb+0x2e0/0x6f0 [ 66.196004][ T5156] ? __alloc_skb+0x209/0x6f0 [ 66.196038][ T5156] ctrl_getfamily+0x2c2/0x3b0 [ 66.196131][ T5156] genl_family_rcv_msg_doit+0x187/0x1f0 [ 66.196211][ T5156] genl_rcv_msg+0x42f/0x470 [ 66.196236][ T5156] ? __pfx_ctrl_getfamily+0x10/0x10 [ 66.196261][ T5156] netlink_rcv_skb+0x11e/0x220 [ 66.196355][ T5156] ? __pfx_genl_rcv_msg+0x10/0x10 [ 66.196395][ T5156] genl_rcv+0x28/0x40 [ 66.196416][ T5156] netlink_unicast+0x5a9/0x680 [ 66.196447][ T5156] netlink_sendmsg+0x5be/0x6f0 [ 66.196538][ T5156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.196575][ T5156] __sys_sendto+0x411/0x470 [ 66.196620][ T5156] __x64_sys_sendto+0x76/0x90 [ 66.196670][ T5156] x64_sys_call+0x200c/0x2550 [ 66.196737][ T5156] do_syscall_64+0x112/0x360 [ 66.196844][ T5156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.196951][ T5156] RIP: 0033:0x7fe02fd8e98e [ 66.196969][ T5156] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 66.196987][ T5156] RSP: 002b:00007fe02e825e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 66.197009][ T5156] RAX: ffffffffffffffda RBX: 00007fe02e8276c0 RCX: 00007fe02fd8e98e [ 66.197025][ T5156] RDX: 0000000000000020 RSI: 00007fe02e826000 RDI: 0000000000000006 [ 66.197040][ T5156] RBP: 0000000000000000 R08: 00007fe02e825f04 R09: 000000000000000c [ 66.197055][ T5156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 66.197131][ T5156] R13: 00007fe02e825f58 R14: 00007fe02e826000 R15: 0000000000000000 [ 66.197229][ T5156] [ 66.788333][ T5188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.307'. [ 66.942673][ T5201] loop3: detected capacity change from 0 to 1024 [ 66.956461][ T5201] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 66.975638][ T5201] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.310: lblock 2 mapped to illegal pblock 2 (length 1) [ 66.975683][ T5201] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 66.975845][ T5201] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 48: comm syz.3.310: lblock 0 mapped to illegal pblock 48 (length 1) [ 66.975875][ T5201] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 66.976034][ T5201] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.310: Failed to acquire dquot type 0 [ 66.976064][ T5201] loop3: lost filesystem error report for type 5 error -117 [ 66.976345][ T5201] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 66.976386][ T5201] loop3: lost filesystem error report for type 5 error -117 [ 66.976490][ T5201] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.310: mark_inode_dirty error [ 66.976521][ T5201] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 66.976649][ T5201] EXT4-fs warning (device loop3): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 66.976751][ T5201] EXT4-fs (loop3): 1 orphan inode deleted [ 66.977651][ T5201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.184280][ T31] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 67.184770][ T31] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:1: Failed to release dquot type 0 [ 67.246789][ T5201] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.247229][ T5201] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz.3.310: Invalid inode table block 1 in block_group 0 [ 67.247268][ T5201] loop3: lost filesystem error report for type 5 error -117 [ 67.247500][ T5201] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 67.247537][ T5201] loop3: lost filesystem error report for type 5 error -117 [ 67.247638][ T5201] EXT4-fs error (device loop3): ext4_quota_off:7353: inode #3: comm syz.3.310: mark_inode_dirty error [ 67.247718][ T5201] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 67.248003][ T5201] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz.3.310: Invalid inode table block 1 in block_group 0 [ 67.248036][ T5201] loop3: lost filesystem error report for type 5 error -117 [ 67.333985][ T29] kauditd_printk_skb: 423 callbacks suppressed [ 67.334001][ T29] audit: type=1400 audit(1789794684.444:1251): avc: denied { write } for pid=5189 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.396142][ T5222] loop1: detected capacity change from 0 to 512 [ 67.396744][ T5222] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.407405][ T5222] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #2: block 8: comm syz.1.311: lblock 0 mapped to illegal pblock 8 (length 1) [ 67.407506][ T5222] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 67.407694][ T5222] EXT4-fs (loop1): Remounting filesystem read-only [ 67.407708][ T5222] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.311: error -EUCLEAN reading directory block [ 67.407739][ T5222] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 67.407766][ T5222] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.311: error -EUCLEAN reading directory block [ 67.407794][ T5222] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 67.408428][ T5222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.429110][ T29] audit: type=1400 audit(1789794684.534:1252): avc: denied { write } for pid=5226 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.470262][ T5225] Failed to initialize the IGMP autojoin socket (err -2) [ 67.634600][ T29] audit: type=1400 audit(1789794684.754:1253): avc: denied { write } for pid=5231 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.690126][ T29] audit: type=1400 audit(1789794684.804:1254): avc: denied { write } for pid=5248 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.021946][ T29] audit: type=1400 audit(1789794685.134:1255): avc: denied { write } for pid=5252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.093491][ T29] audit: type=1400 audit(1789794685.214:1256): avc: denied { write } for pid=5263 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.097504][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.141140][ T5236] Failed to initialize the IGMP autojoin socket (err -2) [ 68.237855][ T5274] loop2: detected capacity change from 0 to 512 [ 68.244267][ T5274] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 68.244348][ T5274] System zones: 1-12 [ 68.244736][ T5274] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.318: missing EA_INODE flag [ 68.244761][ T5274] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 68.244915][ T5274] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.318: error while reading EA inode 12 err=-117 [ 68.244941][ T5274] loop2: lost filesystem error report for type 5 error -117 [ 68.245028][ T5274] EXT4-fs (loop2): 1 orphan inode deleted [ 68.245624][ T5274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.285875][ T5281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.319'. [ 68.362224][ T29] audit: type=1400 audit(1789794685.474:1257): avc: denied { write } for pid=5272 comm="syz.2.318" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.434330][ T4558] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.436268][ T29] audit: type=1400 audit(1789794685.554:1258): avc: denied { write } for pid=5270 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.517492][ T29] audit: type=1400 audit(1789794685.634:1259): avc: denied { write } for pid=5295 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.967236][ T29] audit: type=1400 audit(1789794686.084:1260): avc: denied { write } for pid=5315 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.121419][ T5341] ±ÿ)”ëfl: renamed from lo (while UP) [ 69.257177][ T5353] Failed to initialize the IGMP autojoin socket (err -2) [ 69.338597][ T5349] loop2: detected capacity change from 0 to 512 [ 69.349080][ T5349] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.362782][ T5349] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #2: block 8: comm syz.2.327: lblock 0 mapped to illegal pblock 8 (length 1) [ 69.362879][ T5349] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 69.364622][ T5349] EXT4-fs (loop2): Remounting filesystem read-only [ 69.364646][ T5349] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.327: error -EUCLEAN reading directory block [ 69.364696][ T5349] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 69.364825][ T5349] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.327: error -EUCLEAN reading directory block [ 69.364863][ T5349] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 69.365320][ T5349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.674931][ T5365] Failed to initialize the IGMP autojoin socket (err -2) [ 69.854018][ T5372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 69.988506][ T5392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'. [ 70.025160][ T4558] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.501400][ T5431] gretap0 speed is unknown, defaulting to 1000 [ 70.501708][ T5431] gretap0 speed is unknown, defaulting to 1000 [ 70.522522][ T5431] gretap0 speed is unknown, defaulting to 1000 [ 70.542777][ T5431] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -2 [ 70.703287][ T5431] gretap0 speed is unknown, defaulting to 1000 [ 70.733329][ T5431] gretap0 speed is unknown, defaulting to 1000 [ 70.761450][ T5431] gretap0 speed is unknown, defaulting to 1000 [ 70.786465][ T5431] gretap0 speed is unknown, defaulting to 1000 [ 70.799745][ T5435] loop1: detected capacity change from 0 to 512 [ 70.811727][ T5435] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.811798][ T5435] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.847042][ T5435] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 70.847084][ T5435] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 70.848210][ T5435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 71.060493][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.140533][ T5458] Failed to initialize the IGMP autojoin socket (err -2) [ 71.318803][ T5469] loop3: detected capacity change from 0 to 512 [ 71.330655][ T5469] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.349609][ T5469] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #2: block 8: comm syz.3.345: lblock 0 mapped to illegal pblock 8 (length 1) [ 71.349643][ T5469] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 71.351032][ T5469] EXT4-fs (loop3): Remounting filesystem read-only [ 71.351047][ T5469] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.345: error -EUCLEAN reading directory block [ 71.351082][ T5469] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 71.351110][ T5469] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.345: error -EUCLEAN reading directory block [ 71.351190][ T5469] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 71.351737][ T5469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.445465][ T5463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 71.490432][ T5491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.347'. [ 71.713212][ T5520] FAULT_INJECTION: forcing a failure. [ 71.713212][ T5520] name failslab, interval 1, probability 0, space 0, times 0 [ 71.713242][ T5520] CPU: 0 UID: 0 PID: 5520 Comm: syz.2.353 Not tainted syzkaller #0 PREEMPT(lazy) [ 71.713309][ T5520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.713322][ T5520] Call Trace: [ 71.713328][ T5520] [ 71.713336][ T5520] __dump_stack+0x1d/0x30 [ 71.713363][ T5520] dump_stack_lvl+0x95/0xd0 [ 71.713389][ T5520] dump_stack+0x15/0x1b [ 71.713479][ T5520] should_fail_ex+0x262/0x280 [ 71.713502][ T5520] ? __alloc_skb+0x2e0/0x6f0 [ 71.713539][ T5520] should_failslab+0x8c/0xb0 [ 71.713572][ T5520] kmem_cache_alloc_node_noprof+0x82/0x400 [ 71.713622][ T5520] ? __alloc_skb+0x2e0/0x6f0 [ 71.713657][ T5520] __alloc_skb+0x2e0/0x6f0 [ 71.713693][ T5520] ? __alloc_skb+0x209/0x6f0 [ 71.713766][ T5520] ctrl_getfamily+0x2c2/0x3b0 [ 71.713791][ T5520] genl_family_rcv_msg_doit+0x187/0x1f0 [ 71.713895][ T5520] genl_rcv_msg+0x42f/0x470 [ 71.713917][ T5520] ? __pfx_ctrl_getfamily+0x10/0x10 [ 71.713944][ T5520] netlink_rcv_skb+0x11e/0x220 [ 71.714020][ T5520] ? __pfx_genl_rcv_msg+0x10/0x10 [ 71.714045][ T5520] genl_rcv+0x28/0x40 [ 71.714068][ T5520] netlink_unicast+0x5a9/0x680 [ 71.714120][ T5520] netlink_sendmsg+0x5be/0x6f0 [ 71.714155][ T5520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.714189][ T5520] __sys_sendto+0x411/0x470 [ 71.714242][ T5520] __x64_sys_sendto+0x76/0x90 [ 71.714341][ T5520] x64_sys_call+0x200c/0x2550 [ 71.714373][ T5520] do_syscall_64+0x112/0x360 [ 71.714411][ T5520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.714432][ T5520] RIP: 0033:0x7f017909e98e [ 71.714457][ T5520] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 71.714474][ T5520] RSP: 002b:00007f0177b35e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 71.714493][ T5520] RAX: ffffffffffffffda RBX: 00007f0177b376c0 RCX: 00007f017909e98e [ 71.714564][ T5520] RDX: 0000000000000020 RSI: 00007f0177b36000 RDI: 0000000000000006 [ 71.714649][ T5520] RBP: 0000000000000000 R08: 00007f0177b35f04 R09: 000000000000000c [ 71.714664][ T5520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 71.714677][ T5520] R13: 00007f0177b35f58 R14: 00007f0177b36000 R15: 0000000000000000 [ 71.714695][ T5520] [ 71.820220][ T5524] loop1: detected capacity change from 0 to 512 [ 71.845060][ T5524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.845111][ T5524] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.859788][ T5524] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 71.859819][ T5524] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 71.865192][ T5524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 72.067758][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.505847][ T5566] loop4: detected capacity change from 0 to 1024 [ 72.516346][ T5566] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 72.521806][ T5565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.358'. [ 72.616500][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 72.616516][ T29] audit: type=1400 audit(1789794689.734:1278): avc: denied { write } for pid=5545 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.619851][ T5566] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 2: comm syz.4.357: lblock 2 mapped to illegal pblock 2 (length 1) [ 72.619887][ T5566] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 72.619959][ T5566] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 72.619977][ T5566] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 48: comm syz.4.357: lblock 0 mapped to illegal pblock 48 (length 1) [ 72.620008][ T5566] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 72.621555][ T5566] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 72.621572][ T5566] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.357: Failed to acquire dquot type 0 [ 72.621595][ T5566] loop4: lost filesystem error report for type 5 error -117 [ 72.621663][ T5566] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 72.621685][ T5566] loop4: lost filesystem error report for type 5 error -117 [ 72.621736][ T5566] EXT4-fs error (device loop4): ext4_evict_inode:269: inode #11: comm syz.4.357: mark_inode_dirty error [ 72.621760][ T5566] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 72.623797][ T5566] EXT4-fs warning (device loop4): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 72.623827][ T5566] EXT4-fs (loop4): 1 orphan inode deleted [ 72.624249][ T5566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.667608][ T807] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 72.669711][ T807] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 72.669733][ T807] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:9: Failed to release dquot type 0 [ 72.720633][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.855879][ T29] audit: type=1400 audit(1789794689.964:1279): avc: denied { write } for pid=5579 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.889920][ T5582] Failed to initialize the IGMP autojoin socket (err -2) [ 73.110997][ T5585] Failed to initialize the IGMP autojoin socket (err -2) [ 73.257716][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.258017][ T3312] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 73.258114][ T3312] loop4: lost filesystem error report for type 5 error -117 [ 73.258184][ T3312] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 73.258206][ T3312] loop4: lost filesystem error report for type 5 error -117 [ 73.258327][ T3312] EXT4-fs error (device loop4): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 73.258352][ T3312] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 73.258422][ T3312] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 73.258444][ T3312] loop4: lost filesystem error report for type 5 error -117 [ 73.275024][ T29] audit: type=1326 audit(1789794690.394:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5592 comm="syz.0.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db794e159 code=0x7ffc0000 [ 73.275056][ T29] audit: type=1326 audit(1789794690.394:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5592 comm="syz.0.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db794e159 code=0x7ffc0000 [ 73.275893][ T29] audit: type=1326 audit(1789794690.394:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5592 comm="syz.0.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db794e159 code=0x7ffc0000 [ 73.275921][ T29] audit: type=1326 audit(1789794690.394:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5592 comm="syz.0.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db794e159 code=0x7ffc0000 [ 73.276195][ T29] audit: type=1326 audit(1789794690.394:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5592 comm="syz.0.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f5db794e159 code=0x7ffc0000 [ 73.389746][ T5573] loop2: detected capacity change from 0 to 512 [ 73.408125][ T5573] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 73.408176][ T5573] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 73.490709][ T5600] loop4: detected capacity change from 0 to 512 [ 73.495220][ T5600] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.501050][ T5600] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #2: block 8: comm syz.4.365: lblock 0 mapped to illegal pblock 8 (length 1) [ 73.501163][ T5600] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 73.501277][ T5600] EXT4-fs (loop4): Remounting filesystem read-only [ 73.501292][ T5600] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.365: error -EUCLEAN reading directory block [ 73.501345][ T5600] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 73.501371][ T5600] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.365: error -EUCLEAN reading directory block [ 73.501399][ T5600] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 73.501769][ T5600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.596054][ T5603] loop0: detected capacity change from 0 to 256 [ 73.655889][ T5605] loop2: detected capacity change from 0 to 1024 [ 73.684447][ T5605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.690328][ T5605] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 623: comm syz.2.359: Attempting to read directory block (623) that is past i_size (638464) [ 73.740944][ T4558] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.024194][ T5637] FAULT_INJECTION: forcing a failure. [ 74.024194][ T5637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.024228][ T5637] CPU: 0 UID: 0 PID: 5637 Comm: syz.0.369 Not tainted syzkaller #0 PREEMPT(lazy) [ 74.024256][ T5637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.024277][ T5637] Call Trace: [ 74.024283][ T5637] [ 74.024362][ T5637] __dump_stack+0x1d/0x30 [ 74.024391][ T5637] dump_stack_lvl+0x95/0xd0 [ 74.024414][ T5637] dump_stack+0x15/0x1b [ 74.024456][ T5637] should_fail_ex+0x262/0x280 [ 74.024479][ T5637] should_fail+0xb/0x20 [ 74.024520][ T5637] should_fail_usercopy+0x1a/0x20 [ 74.024546][ T5637] _copy_from_iter+0xcc/0xe70 [ 74.024635][ T5637] ? __alloc_skb+0x516/0x6f0 [ 74.024664][ T5637] ? __alloc_skb+0x209/0x6f0 [ 74.024736][ T5637] netlink_sendmsg+0x4a4/0x6f0 [ 74.024768][ T5637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.024800][ T5637] __sys_sendto+0x411/0x470 [ 74.024871][ T5637] __x64_sys_sendto+0x76/0x90 [ 74.024902][ T5637] x64_sys_call+0x200c/0x2550 [ 74.024926][ T5637] do_syscall_64+0x112/0x360 [ 74.025005][ T5637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.025051][ T5637] RIP: 0033:0x7f5db790e98e [ 74.025069][ T5637] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 74.025094][ T5637] RSP: 002b:00007f5db63a5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 74.025116][ T5637] RAX: ffffffffffffffda RBX: 00007f5db63a76c0 RCX: 00007f5db790e98e [ 74.025133][ T5637] RDX: 0000000000000020 RSI: 00007f5db63a6000 RDI: 0000000000000006 [ 74.025185][ T5637] RBP: 0000000000000000 R08: 00007f5db63a5f04 R09: 000000000000000c [ 74.025199][ T5637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 74.025213][ T5637] R13: 00007f5db63a5f58 R14: 00007f5db63a6000 R15: 0000000000000000 [ 74.025232][ T5637] [ 74.064795][ T5644] siw: device registration error -23 [ 74.715825][ T5644] loop2: detected capacity change from 0 to 512 [ 74.722820][ T5644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.722943][ T5644] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.732605][ T5644] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 74.732633][ T5644] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 74.733892][ T5644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 74.807823][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.887243][ T4558] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.046330][ T5687] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.046585][ T5687] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.450609][ T5687] Failed to initialize the IGMP autojoin socket (err -2) [ 75.464028][ T5706] loop4: detected capacity change from 0 to 512 [ 75.473070][ T5706] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.476964][ T5706] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #2: block 8: comm syz.4.378: lblock 0 mapped to illegal pblock 8 (length 1) [ 75.477020][ T5706] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 75.477159][ T5706] EXT4-fs (loop4): Remounting filesystem read-only [ 75.477172][ T5706] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.378: error -EUCLEAN reading directory block [ 75.477230][ T5706] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 75.477273][ T5706] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.378: error -EUCLEAN reading directory block [ 75.477362][ T5706] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 75.478210][ T5706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.599383][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.625262][ T5721] Failed to initialize the IGMP autojoin socket (err -2) [ 75.657394][ T5718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 75.789358][ T5724] loop4: detected capacity change from 0 to 512 [ 75.796071][ T5724] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.810487][ T5724] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #2: block 8: comm syz.4.381: lblock 0 mapped to illegal pblock 8 (length 1) [ 75.810546][ T5724] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 75.811339][ T5724] EXT4-fs (loop4): Remounting filesystem read-only [ 75.811363][ T5724] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.381: error -EUCLEAN reading directory block [ 75.811406][ T5724] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 75.811447][ T5724] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.381: error -EUCLEAN reading directory block [ 75.811561][ T5724] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 75.844394][ T5724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.880201][ T5739] loop1: detected capacity change from 0 to 512 [ 75.885094][ T5739] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.893626][ T5739] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #2: block 8: comm syz.1.383: lblock 0 mapped to illegal pblock 8 (length 1) [ 75.893732][ T5739] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 75.895021][ T5739] EXT4-fs (loop1): Remounting filesystem read-only [ 75.895039][ T5739] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.383: error -EUCLEAN reading directory block [ 75.895086][ T5739] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 75.895283][ T5739] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.383: error -EUCLEAN reading directory block [ 75.895323][ T5739] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 75.895819][ T5739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.019443][ T5750] siw: device registration error -23 [ 76.048112][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.063214][ T5750] loop0: detected capacity change from 0 to 512 [ 76.063944][ T5750] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.063974][ T5750] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.076289][ T5750] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 76.076318][ T5750] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 76.077385][ T5750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 76.106710][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.148583][ T5767] FAULT_INJECTION: forcing a failure. [ 76.148583][ T5767] name failslab, interval 1, probability 0, space 0, times 0 [ 76.148617][ T5767] CPU: 0 UID: 0 PID: 5767 Comm: syz.1.386 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.148706][ T5767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.148719][ T5767] Call Trace: [ 76.148726][ T5767] [ 76.148734][ T5767] __dump_stack+0x1d/0x30 [ 76.148763][ T5767] dump_stack_lvl+0x95/0xd0 [ 76.148874][ T5767] dump_stack+0x15/0x1b [ 76.148938][ T5767] should_fail_ex+0x262/0x280 [ 76.148967][ T5767] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 76.148998][ T5767] should_failslab+0x8c/0xb0 [ 76.149034][ T5767] __kmalloc_noprof+0xd0/0x4d0 [ 76.149138][ T5767] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 76.149171][ T5767] genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 76.149202][ T5767] ? nlmon_xmit+0x4f/0x60 [ 76.149231][ T5767] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 76.149312][ T5767] ? genl_get_cmd+0x411/0x650 [ 76.149383][ T5767] ? radix_tree_lookup+0xfa/0x140 [ 76.149412][ T5767] genl_rcv_msg+0x42f/0x470 [ 76.149438][ T5767] ? __pfx_ctrl_getfamily+0x10/0x10 [ 76.149464][ T5767] netlink_rcv_skb+0x11e/0x220 [ 76.149544][ T5767] ? __pfx_genl_rcv_msg+0x10/0x10 [ 76.149619][ T5767] genl_rcv+0x28/0x40 [ 76.149642][ T5767] netlink_unicast+0x5a9/0x680 [ 76.149675][ T5767] netlink_sendmsg+0x5be/0x6f0 [ 76.149784][ T5767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.149819][ T5767] __sys_sendto+0x411/0x470 [ 76.149862][ T5767] __x64_sys_sendto+0x76/0x90 [ 76.149954][ T5767] x64_sys_call+0x200c/0x2550 [ 76.149979][ T5767] do_syscall_64+0x112/0x360 [ 76.150036][ T5767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.150063][ T5767] RIP: 0033:0x7fe02fd8e98e [ 76.150081][ T5767] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 76.150152][ T5767] RSP: 002b:00007fe02e825e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 76.150238][ T5767] RAX: ffffffffffffffda RBX: 00007fe02e8276c0 RCX: 00007fe02fd8e98e [ 76.150252][ T5767] RDX: 0000000000000020 RSI: 00007fe02e826000 RDI: 0000000000000006 [ 76.150265][ T5767] RBP: 0000000000000000 R08: 00007fe02e825f04 R09: 000000000000000c [ 76.150312][ T5767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 76.150326][ T5767] R13: 00007fe02e825f58 R14: 00007fe02e826000 R15: 0000000000000000 [ 76.150347][ T5767] [ 76.519040][ T5782] Failed to initialize the IGMP autojoin socket (err -2) [ 76.809325][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.968075][ T5803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.392'. [ 77.298951][ T5822] FAULT_INJECTION: forcing a failure. [ 77.298951][ T5822] name failslab, interval 1, probability 0, space 0, times 0 [ 77.298980][ T5822] CPU: 1 UID: 0 PID: 5822 Comm: syz.1.396 Not tainted syzkaller #0 PREEMPT(lazy) [ 77.299010][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.299047][ T5822] Call Trace: [ 77.299055][ T5822] [ 77.299065][ T5822] __dump_stack+0x1d/0x30 [ 77.299092][ T5822] dump_stack_lvl+0x95/0xd0 [ 77.299125][ T5822] dump_stack+0x15/0x1b [ 77.299148][ T5822] should_fail_ex+0x262/0x280 [ 77.299241][ T5822] should_failslab+0x8c/0xb0 [ 77.299271][ T5822] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 77.299318][ T5822] ? register_pidns_sysctls+0x46/0x130 [ 77.299347][ T5822] ? register_pidns_sysctls+0x46/0x130 [ 77.299374][ T5822] kmemdup_noprof+0x2b/0x70 [ 77.299457][ T5822] register_pidns_sysctls+0x46/0x130 [ 77.299480][ T5822] copy_pid_ns+0x396/0x640 [ 77.299549][ T5822] ? create_new_namespaces+0x159/0x420 [ 77.299660][ T5822] create_new_namespaces+0x168/0x420 [ 77.299699][ T5822] unshare_nsproxy_namespaces+0x115/0x150 [ 77.299735][ T5822] ksys_unshare+0x42b/0x710 [ 77.299898][ T5822] __x64_sys_unshare+0x1f/0x30 [ 77.300012][ T5822] x64_sys_call+0x1e33/0x2550 [ 77.300038][ T5822] do_syscall_64+0x112/0x360 [ 77.300079][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.300124][ T5822] RIP: 0033:0x7fe02fdce159 [ 77.300141][ T5822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.300159][ T5822] RSP: 002b:00007fe02e827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 77.300178][ T5822] RAX: ffffffffffffffda RBX: 00007fe030055fa0 RCX: 00007fe02fdce159 [ 77.300192][ T5822] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000066000200 [ 77.300275][ T5822] RBP: 00007fe02fe6506b R08: 0000000000000000 R09: 0000000000000000 [ 77.300287][ T5822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.300299][ T5822] R13: 00007fe030056038 R14: 00007fe030055fa0 R15: 00007fffc76f5d68 [ 77.300317][ T5822] [ 77.514480][ T5796] Failed to initialize the IGMP autojoin socket (err -2) [ 77.609988][ T5839] Failed to initialize the IGMP autojoin socket (err -2) [ 77.643179][ T5834] loop1: detected capacity change from 0 to 512 [ 77.643988][ T5834] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.644111][ T5834] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.675654][ T5834] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 77.675724][ T5834] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 77.680447][ T5834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 77.730949][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 77.730967][ T29] audit: type=1400 audit(1789794694.844:1427): avc: denied { write } for pid=5835 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.810704][ T29] audit: type=1400 audit(1789794694.894:1428): avc: denied { write } for pid=5856 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.920328][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.000822][ T29] audit: type=1400 audit(1789794695.114:1429): avc: denied { write } for pid=5859 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.031312][ T5870] loop1: detected capacity change from 0 to 512 [ 78.034088][ T5870] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.043905][ T29] audit: type=1400 audit(1789794695.164:1430): avc: denied { write } for pid=5880 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.052675][ T5870] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #2: block 8: comm syz.1.411: lblock 0 mapped to illegal pblock 8 (length 1) [ 78.052760][ T5870] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 78.056360][ T5870] EXT4-fs (loop1): Remounting filesystem read-only [ 78.056390][ T5870] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.411: error -EUCLEAN reading directory block [ 78.056519][ T5870] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 78.056591][ T5870] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.411: error -EUCLEAN reading directory block [ 78.056679][ T5870] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 78.057353][ T5870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.233786][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.255876][ T29] audit: type=1400 audit(1789794695.374:1431): avc: denied { write } for pid=5885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.393850][ T5906] FAULT_INJECTION: forcing a failure. [ 78.393850][ T5906] name failslab, interval 1, probability 0, space 0, times 0 [ 78.393912][ T5906] CPU: 1 UID: 0 PID: 5906 Comm: syz.1.403 Not tainted syzkaller #0 PREEMPT(lazy) [ 78.393942][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.393957][ T5906] Call Trace: [ 78.393964][ T5906] [ 78.393973][ T5906] __dump_stack+0x1d/0x30 [ 78.394002][ T5906] dump_stack_lvl+0x95/0xd0 [ 78.394045][ T5906] dump_stack+0x15/0x1b [ 78.394069][ T5906] should_fail_ex+0x262/0x280 [ 78.394096][ T5906] ? skb_clone+0x151/0x1f0 [ 78.394118][ T5906] should_failslab+0x8c/0xb0 [ 78.394180][ T5906] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 78.394215][ T5906] ? skb_clone+0x151/0x1f0 [ 78.394302][ T5906] skb_clone+0x151/0x1f0 [ 78.394325][ T5906] __netlink_deliver_tap+0x2be/0x510 [ 78.394400][ T5906] netlink_unicast+0x656/0x680 [ 78.394434][ T5906] netlink_sendmsg+0x5be/0x6f0 [ 78.394528][ T5906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.394619][ T5906] __sys_sendto+0x411/0x470 [ 78.394665][ T5906] __x64_sys_sendto+0x76/0x90 [ 78.394778][ T5906] x64_sys_call+0x200c/0x2550 [ 78.394809][ T5906] do_syscall_64+0x112/0x360 [ 78.394903][ T5906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.394942][ T5906] RIP: 0033:0x7fe02fd8e98e [ 78.394960][ T5906] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 78.395033][ T5906] RSP: 002b:00007fe02e804e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 78.395095][ T5906] RAX: ffffffffffffffda RBX: 00007fe02e8066c0 RCX: 00007fe02fd8e98e [ 78.395111][ T5906] RDX: 0000000000000020 RSI: 00007fe02e805000 RDI: 0000000000000006 [ 78.395158][ T5906] RBP: 0000000000000000 R08: 00007fe02e804f04 R09: 000000000000000c [ 78.395174][ T5906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 78.395189][ T5906] R13: 00007fe02e804f58 R14: 00007fe02e805000 R15: 0000000000000000 [ 78.395280][ T5906] [ 78.526452][ T29] audit: type=1400 audit(1789794695.634:1432): avc: denied { write } for pid=5904 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.558836][ T5903] loop4: detected capacity change from 0 to 512 [ 78.583973][ T5903] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.602797][ T5903] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #2: block 8: comm syz.4.402: lblock 0 mapped to illegal pblock 8 (length 1) [ 78.602838][ T5903] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 78.602944][ T5903] EXT4-fs (loop4): Remounting filesystem read-only [ 78.602959][ T5903] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.402: error -EUCLEAN reading directory block [ 78.602989][ T5903] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 78.603093][ T5903] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.402: error -EUCLEAN reading directory block [ 78.603134][ T5903] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 78.603579][ T5903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.751563][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.964369][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 79.010706][ T29] audit: type=1400 audit(1789794696.124:1433): avc: denied { write } for pid=5911 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.071949][ T29] audit: type=1400 audit(1789794696.184:1434): avc: denied { write } for pid=5928 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.090175][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.406'. [ 79.386822][ T29] audit: type=1400 audit(1789794696.504:1435): avc: denied { write } for pid=5937 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.391208][ T5954] siw: device registration error -23 [ 79.434113][ T5954] loop3: detected capacity change from 0 to 512 [ 79.450888][ T5954] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.451055][ T5954] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.531523][ T29] audit: type=1400 audit(1789794696.644:1436): avc: denied { write } for pid=5957 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.586893][ T5954] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 79.586921][ T5954] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 79.587998][ T5954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 79.676238][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.820311][ T5981] loop3: detected capacity change from 0 to 512 [ 79.820862][ T5981] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.864051][ T5981] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #2: block 8: comm syz.3.414: lblock 0 mapped to illegal pblock 8 (length 1) [ 79.864091][ T5981] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 79.864206][ T5981] EXT4-fs (loop3): Remounting filesystem read-only [ 79.864224][ T5981] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.414: error -EUCLEAN reading directory block [ 79.864259][ T5981] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 79.864286][ T5981] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.414: error -EUCLEAN reading directory block [ 79.864380][ T5981] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 79.865188][ T5981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.025176][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.210902][ T6025] loop3: detected capacity change from 0 to 512 [ 80.226196][ T6025] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.238475][ T6025] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #2: block 8: comm syz.3.416: lblock 0 mapped to illegal pblock 8 (length 1) [ 80.238583][ T6025] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 80.239805][ T6025] EXT4-fs (loop3): Remounting filesystem read-only [ 80.239914][ T6025] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.416: error -EUCLEAN reading directory block [ 80.239949][ T6025] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 80.239998][ T6025] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.416: error -EUCLEAN reading directory block [ 80.240029][ T6025] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 80.241896][ T6025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.292093][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 80.386180][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.497345][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.419'. [ 80.683510][ T6061] FAULT_INJECTION: forcing a failure. [ 80.683510][ T6061] name failslab, interval 1, probability 0, space 0, times 0 [ 80.683539][ T6061] CPU: 0 UID: 0 PID: 6061 Comm: syz.3.423 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.683568][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.683583][ T6061] Call Trace: [ 80.683661][ T6061] [ 80.683670][ T6061] __dump_stack+0x1d/0x30 [ 80.683699][ T6061] dump_stack_lvl+0x95/0xd0 [ 80.683725][ T6061] dump_stack+0x15/0x1b [ 80.683746][ T6061] should_fail_ex+0x262/0x280 [ 80.683801][ T6061] ? __alloc_skb+0x2e0/0x6f0 [ 80.683854][ T6061] should_failslab+0x8c/0xb0 [ 80.683888][ T6061] kmem_cache_alloc_node_noprof+0x82/0x400 [ 80.684044][ T6061] ? __alloc_skb+0x2e0/0x6f0 [ 80.684114][ T6061] __alloc_skb+0x2e0/0x6f0 [ 80.684148][ T6061] ? __alloc_skb+0x209/0x6f0 [ 80.684254][ T6061] ctrl_getfamily+0x2c2/0x3b0 [ 80.684279][ T6061] genl_family_rcv_msg_doit+0x187/0x1f0 [ 80.684310][ T6061] genl_rcv_msg+0x42f/0x470 [ 80.684418][ T6061] ? __pfx_ctrl_getfamily+0x10/0x10 [ 80.684445][ T6061] netlink_rcv_skb+0x11e/0x220 [ 80.684482][ T6061] ? __pfx_genl_rcv_msg+0x10/0x10 [ 80.684511][ T6061] genl_rcv+0x28/0x40 [ 80.684532][ T6061] netlink_unicast+0x5a9/0x680 [ 80.684563][ T6061] netlink_sendmsg+0x5be/0x6f0 [ 80.684655][ T6061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.684687][ T6061] __sys_sendto+0x411/0x470 [ 80.684760][ T6061] __x64_sys_sendto+0x76/0x90 [ 80.684792][ T6061] x64_sys_call+0x200c/0x2550 [ 80.684862][ T6061] do_syscall_64+0x112/0x360 [ 80.684943][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.684970][ T6061] RIP: 0033:0x7fb568ffe98e [ 80.684989][ T6061] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 80.685044][ T6061] RSP: 002b:00007fb567a95e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 80.685068][ T6061] RAX: ffffffffffffffda RBX: 00007fb567a976c0 RCX: 00007fb568ffe98e [ 80.685085][ T6061] RDX: 0000000000000020 RSI: 00007fb567a96000 RDI: 0000000000000007 [ 80.685100][ T6061] RBP: 0000000000000000 R08: 00007fb567a95f04 R09: 000000000000000c [ 80.685171][ T6061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 80.685186][ T6061] R13: 00007fb567a95f58 R14: 00007fb567a96000 R15: 0000000000000000 [ 80.685208][ T6061] [ 81.074259][ T6076] Failed to initialize the IGMP autojoin socket (err -2) [ 81.212854][ T6092] loop3: detected capacity change from 0 to 512 [ 81.217473][ T6092] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.219716][ T6092] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #2: block 8: comm syz.3.426: lblock 0 mapped to illegal pblock 8 (length 1) [ 81.219755][ T6092] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 81.219884][ T6092] EXT4-fs (loop3): Remounting filesystem read-only [ 81.219900][ T6092] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.426: error -EUCLEAN reading directory block [ 81.219947][ T6092] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 81.219983][ T6092] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.426: error -EUCLEAN reading directory block [ 81.220014][ T6092] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 81.220521][ T6092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.483390][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.605429][ T6111] FAULT_INJECTION: forcing a failure. [ 81.605429][ T6111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.605460][ T6111] CPU: 0 UID: 0 PID: 6111 Comm: syz.3.428 Not tainted syzkaller #0 PREEMPT(lazy) [ 81.605489][ T6111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.605502][ T6111] Call Trace: [ 81.605518][ T6111] [ 81.605526][ T6111] __dump_stack+0x1d/0x30 [ 81.605552][ T6111] dump_stack_lvl+0x95/0xd0 [ 81.605578][ T6111] dump_stack+0x15/0x1b [ 81.605615][ T6111] should_fail_ex+0x262/0x280 [ 81.605642][ T6111] should_fail+0xb/0x20 [ 81.605784][ T6111] should_fail_usercopy+0x1a/0x20 [ 81.605813][ T6111] _copy_from_iter+0xcc/0xe70 [ 81.605904][ T6111] ? __alloc_skb+0x516/0x6f0 [ 81.605939][ T6111] ? __alloc_skb+0x209/0x6f0 [ 81.606002][ T6111] netlink_sendmsg+0x4a4/0x6f0 [ 81.606035][ T6111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.606069][ T6111] __sys_sendto+0x411/0x470 [ 81.606189][ T6111] __x64_sys_sendto+0x76/0x90 [ 81.606227][ T6111] x64_sys_call+0x200c/0x2550 [ 81.606280][ T6111] do_syscall_64+0x112/0x360 [ 81.606316][ T6111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.606337][ T6111] RIP: 0033:0x7fb568ffe98e [ 81.606393][ T6111] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 81.606412][ T6111] RSP: 002b:00007fb567a95e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 81.606433][ T6111] RAX: ffffffffffffffda RBX: 00007fb567a976c0 RCX: 00007fb568ffe98e [ 81.606450][ T6111] RDX: 0000000000000020 RSI: 00007fb567a96000 RDI: 0000000000000007 [ 81.606465][ T6111] RBP: 0000000000000000 R08: 00007fb567a95f04 R09: 000000000000000c [ 81.606479][ T6111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 81.606564][ T6111] R13: 00007fb567a95f58 R14: 00007fb567a96000 R15: 0000000000000000 [ 81.606585][ T6111] [ 81.927515][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'. [ 81.930435][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.430'. [ 81.966256][ T6136] hsr_slave_1 (unregistering): left promiscuous mode [ 82.275314][ T6149] loop0: detected capacity change from 0 to 512 [ 82.290654][ T6149] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.290693][ T6149] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 82.389950][ T6149] bond0: ARP target 192.0.2.1 is already present [ 82.390090][ T6149] bond0: option arp_ip_target: invalid value (+192.0.2.1) [ 82.425491][ T6184] ±ÿ: renamed from lo (while UP) [ 82.437909][ T6184] loop0: detected capacity change from 0 to 512 [ 82.457258][ T6184] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.460023][ T6184] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #2: block 8: comm syz.0.439: lblock 0 mapped to illegal pblock 8 (length 1) [ 82.460111][ T6184] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 82.460460][ T6184] EXT4-fs (loop0): Remounting filesystem read-only [ 82.460476][ T6184] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.439: error -EUCLEAN reading directory block [ 82.460505][ T6184] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 82.460540][ T6184] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.439: error -EUCLEAN reading directory block [ 82.460568][ T6184] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 82.461105][ T6184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.645028][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.780480][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 82.780497][ T29] audit: type=1400 audit(1789794699.864:1455): avc: denied { write } for pid=6200 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.822630][ T29] audit: type=1400 audit(1789794699.944:1456): avc: denied { write } for pid=6219 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.997161][ T29] audit: type=1400 audit(1789794700.114:1457): avc: denied { write } for pid=6222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.105265][ T29] audit: type=1400 audit(1789794700.224:1458): avc: denied { write } for pid=6236 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.310688][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 83.468747][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.448'. [ 83.656462][ T6267] ================================================================== [ 83.656508][ T6267] BUG: KCSAN: data-race in rwsem_down_write_slowpath / rwsem_down_write_slowpath [ 83.656563][ T6267] [ 83.656569][ T6267] write to 0xffffc900017c7918 of 1 bytes by task 6255 on cpu 1: [ 83.656591][ T6267] rwsem_down_write_slowpath+0x3eb/0xab0 [ 83.656628][ T6267] down_write+0xad/0xc0 [ 83.656659][ T6267] kernfs_remove_by_name_ns+0x6b/0x110 [ 83.656685][ T6267] sysfs_remove_group+0xa5/0x170 [ 83.656720][ T6267] sysfs_remove_groups+0x3a/0x80 [ 83.656754][ T6267] device_remove_attrs+0x15a/0x1a0 [ 83.656781][ T6267] device_del+0x357/0x790 [ 83.656805][ T6267] rfkill_unregister+0x81/0x220 [ 83.656841][ T6267] nfc_unregister_rfkill+0x80/0xc0 [ 83.656873][ T6267] nci_unregister_device+0x27/0x170 [ 83.656913][ T6267] virtual_ncidev_close+0x2a/0x50 [ 83.656948][ T6267] __fput+0x29e/0x630 [ 83.656971][ T6267] fput_close_sync+0xad/0x190 [ 83.656995][ T6267] __x64_sys_close+0x55/0xf0 [ 83.657022][ T6267] x64_sys_call+0x812/0x2550 [ 83.657051][ T6267] do_syscall_64+0x112/0x360 [ 83.657088][ T6267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.657112][ T6267] [ 83.657118][ T6267] read to 0xffffc900017c7918 of 1 bytes by task 6267 on cpu 0: [ 83.657137][ T6267] rwsem_down_write_slowpath+0x462/0xab0 [ 83.657173][ T6267] down_write+0xad/0xc0 [ 83.657204][ T6267] kernfs_add_one+0x5a/0x350 [ 83.657222][ T6267] kernfs_create_dir_ns+0x124/0x170 [ 83.657243][ T6267] internal_create_group+0x2b4/0x9e0 [ 83.657275][ T6267] sysfs_create_group+0x1f/0x30 [ 83.657304][ T6267] loop_configure+0x7ec/0x9c0 [ 83.657323][ T6267] lo_ioctl+0x1e3/0x1430 [ 83.657342][ T6267] blkdev_ioctl+0x387/0x460 [ 83.657375][ T6267] __se_sys_ioctl+0xce/0x140 [ 83.657412][ T6267] __x64_sys_ioctl+0x43/0x50 [ 83.657444][ T6267] x64_sys_call+0x239d/0x2550 [ 83.657471][ T6267] do_syscall_64+0x112/0x360 [ 83.657507][ T6267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.657530][ T6267] [ 83.657534][ T6267] value changed: 0x00 -> 0x01 [ 83.657545][ T6267] [ 83.657550][ T6267] Reported by Kernel Concurrency Sanitizer on: [ 83.657562][ T6267] CPU: 0 UID: 0 PID: 6267 Comm: syz.3.450 Not tainted syzkaller #0 PREEMPT(lazy) [ 83.657591][ T6267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.657605][ T6267] ================================================================== [ 83.658037][ T6267] loop3: detected capacity change from 0 to 1764 [ 83.659622][ T6267] iso9660: Bad value for 'gid' [ 83.659638][ T6267] iso9660: Bad value for 'gid' [ 83.751436][ T6259] loop1: detected capacity change from 0 to 512 [ 83.758149][ T6267] loop3: detected capacity change from 0 to 1024 [ 83.777714][ T6267] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 83.796551][ T6267] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.450: lblock 2 mapped to illegal pblock 2 (length 1) [ 83.796590][ T6267] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 83.796652][ T6267] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 83.796715][ T6267] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 48: comm syz.3.450: lblock 0 mapped to illegal pblock 48 (length 1) [ 83.796765][ T6267] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 83.796842][ T6267] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 83.796858][ T6267] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.450: Failed to acquire dquot type 0 [ 83.796942][ T6267] loop3: lost filesystem error report for type 5 error -117 [ 83.797005][ T6267] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 83.797023][ T6267] loop3: lost filesystem error report for type 5 error -117 [ 83.797216][ T6267] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.450: mark_inode_dirty error [ 83.797239][ T6267] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 83.797296][ T6267] EXT4-fs warning (device loop3): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 83.797405][ T6267] EXT4-fs (loop3): 1 orphan inode deleted [ 83.797833][ T6267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.824037][ T42] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 83.826994][ T42] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 83.827016][ T42] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:2: Failed to release dquot type 0 [ 83.878122][ T6259] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.878225][ T6259] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 83.928385][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.928716][ T3306] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 83.928743][ T3306] loop3: lost filesystem error report for type 5 error -117 [ 83.928826][ T3306] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 83.928844][ T3306] loop3: lost filesystem error report for type 5 error -117 [ 83.928987][ T3306] EXT4-fs error (device loop3): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 83.929029][ T3306] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 83.929135][ T3306] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 83.929160][ T3306] loop3: lost filesystem error report for type 5 error -117 [ 84.067487][ T6271] bond0: ARP target 192.0.2.1 is already present [ 84.067536][ T6271] bond0: option arp_ip_target: invalid value (+192.0.2.1) [ 84.280914][ T29] audit: type=1400 audit(1789794701.394:1459): avc: denied { write } for pid=6272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.305807][ T29] audit: type=1400 audit(1789794701.404:1460): avc: denied { write } for pid=6283 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.369123][ T29] audit: type=1400 audit(1789794701.484:1461): avc: denied { write } for pid=6285 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.801714][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 87.801729][ T29] audit: type=1400 audit(1789794704.914:1527): avc: denied { write } for pid=6796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.832726][ T29] audit: type=1400 audit(1789794704.924:1528): avc: denied { write } for pid=6807 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.596582][ T29] audit: type=1400 audit(1789794709.714:1529): avc: denied { write } for pid=6863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.630916][ T29] audit: type=1400 audit(1789794709.744:1530): avc: denied { write } for pid=6874 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.009387][ T29] audit: type=1400 audit(1789794710.124:1531): avc: denied { write } for pid=6880 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.043374][ T29] audit: type=1400 audit(1789794710.164:1532): avc: denied { write } for pid=6891 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.173297][ T29] audit: type=1400 audit(1789794710.294:1533): avc: denied { write } for pid=6894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.210479][ T29] audit: type=1400 audit(1789794710.324:1534): avc: denied { write } for pid=6905 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1