last executing test programs: 35.166579355s ago: executing program 4 (id=308): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") r1 = openat(r0, &(0x7f0000000000)='./file1/file0\x00', 0x42, 0x20) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 34.933815703s ago: executing program 4 (id=311): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x275a, 0x0) socket$inet6(0xa, 0x800, 0xbff) fcntl$lock(r4, 0x7, &(0x7f0000000100)={0x1, 0x2, 0x3, 0xfffffffffffffff1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080), 0x46) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r6, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0xfffe, @multicast2}}, {{0x2, 0x4e20, @remote}}}, 0x108) sendto$inet(r6, &(0x7f0000000000)="289819eada7b716444f9d2cb79f2bb686089aa9114204afe5c80d371a6aa0a92e0d153361519022d6dd492d57c6ea193cb053ff2c8b6947b3bb5f01cd610bbca0f0028f99042d2ca10c58efce3cff5036be97bb7aab31496e268117fde99e1b267d07bf860e0c16b36be1047", 0x6c, 0x1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x26020480) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5c}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0xfffffffffffffc9f, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x0, 0x5, 0x2000000000000000, 0x200000b, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) r10 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a00"], 0xfe33) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000}, 0x20) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000000), 0x4) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x404c001}, 0x22008014) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, 0x0, 0x917, 0xa7, 0xfffffd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}]}, 0x1c}}, 0x0) 34.519875276s ago: executing program 4 (id=314): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x20ff}], 0x1, 0x40010102, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c", 0x7f) 34.428058669s ago: executing program 4 (id=315): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000600)={[{@grpquota}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@grpjquota}]}, 0x3, 0x79e, &(0x7f0000000640)="$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") fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/anycast6\x00') fchdir(r1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='jfs\x00', 0x0, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000200)='ns/uts\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000000)={0x47, 0xffffffffffffffff, 0x4, 0x9}) r4 = socket$inet6(0xa, 0x4, 0xfffffffe) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {0x0}], 0x3}}], 0x1, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) prlimit64(r2, 0xd, 0x0, &(0x7f0000000040)) 34.230121535s ago: executing program 4 (id=316): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0xe4, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x0) 32.509509371s ago: executing program 4 (id=321): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r2) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x14, r3, 0x8808916c5f45b02d, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4068010) process_madvise(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="5e546507da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}], 0x1, 0x4046040) 32.20052481s ago: executing program 32 (id=321): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r2) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x14, r3, 0x8808916c5f45b02d, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4068010) process_madvise(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="5e546507da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}], 0x1, 0x4046040) 5.110574225s ago: executing program 0 (id=514): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xcc) r2 = syz_io_uring_setup(0x574b, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7, 0x0, r1}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x269, 0x7e4}, 0x10, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r5 = socket(0x10, 0x2, 0x0) syz_emit_ethernet(0x106, &(0x7f0000000680)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x7, 0x4, 0x2, 0x2, 0xf8, 0x64, 0x0, 0x4, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast2, {[@ra={0x94, 0x4}, @end, @noop]}}, {{0x4e23, 0x4e20, 0x4, 0x1, 0x5, 0x0, 0x0, 0x8, 0x1, "131420", 0x4, "f14327"}, "58e3a8ce22336b6e8d3408e297577a5a0985aced8515f2a02187be136d935c2fd9560174e70d781370b3e3f1c0810fc1a6c6d72277c6cdbadf2486289755eac3e42474e8eeb78e36ef0564480818c56ca342b3756091f9ce5b3bd43157fa265fbd6f65866e3d8d24ead1bd83db1e9764f40ff41066fe3fb18c50e7e19cb71e46bf5ee2924e0001d1cc286fd0477578bb431d51a42a7cebd726f90950ad68dd0d81b4f28f60f0b987b8e3e8f7eb377fc7357c00358614b609f21d59d861a7babf4a1ee77f933946791f3324b1"}}}}}, &(0x7f00000007c0)={0x1, 0x1, [0x1e7, 0x6e, 0x3f, 0xe48]}) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xcc) (async) syz_io_uring_setup(0x574b, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7, 0x0, r1}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) (async) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x269, 0x7e4}, 0x10, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) (async) socket(0x10, 0x2, 0x0) (async) syz_emit_ethernet(0x106, &(0x7f0000000680)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x7, 0x4, 0x2, 0x2, 0xf8, 0x64, 0x0, 0x4, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast2, {[@ra={0x94, 0x4}, @end, @noop]}}, {{0x4e23, 0x4e20, 0x4, 0x1, 0x5, 0x0, 0x0, 0x8, 0x1, "131420", 0x4, "f14327"}, "58e3a8ce22336b6e8d3408e297577a5a0985aced8515f2a02187be136d935c2fd9560174e70d781370b3e3f1c0810fc1a6c6d72277c6cdbadf2486289755eac3e42474e8eeb78e36ef0564480818c56ca342b3756091f9ce5b3bd43157fa265fbd6f65866e3d8d24ead1bd83db1e9764f40ff41066fe3fb18c50e7e19cb71e46bf5ee2924e0001d1cc286fd0477578bb431d51a42a7cebd726f90950ad68dd0d81b4f28f60f0b987b8e3e8f7eb377fc7357c00358614b609f21d59d861a7babf4a1ee77f933946791f3324b1"}}}}}, &(0x7f00000007c0)={0x1, 0x1, [0x1e7, 0x6e, 0x3f, 0xe48]}) (async) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) 4.864230543s ago: executing program 0 (id=520): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES16], 0x14) 4.701280478s ago: executing program 0 (id=522): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x80, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xf93, 0x80, 0x8, 0x5}}}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x70ad26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0x8, 0xa}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) flock(r1, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x2006}, 0x1c) (async) r5 = syz_io_uring_setup(0x7b56, &(0x7f0000000140)={0x0, 0xce63, 0x100, 0x1, 0x1ed}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000ac0)={0xffffffff, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/102, 0x66}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/5, 0x5}, {&(0x7f00000004c0)=""/57, 0x39}, {&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f00000005c0)=""/207, 0xcf}, {&(0x7f00000007c0)=""/245, 0xf5}, {&(0x7f00000008c0)=""/3, 0x3}, {&(0x7f0000000900)=""/135, 0x87}], &(0x7f0000000a80)=[0x6, 0x1, 0x2, 0x5, 0x5, 0x9250, 0xf0], 0x9}, 0x20) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) 4.686231968s ago: executing program 0 (id=524): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_emit_ethernet(0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x80000) creat(&(0x7f00000001c0)='./file0\x00', 0x102) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x100004, 0xdf18, 0xe2a4, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r1}, 0x38) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000001c0)=0x4) io_uring_setup(0x664b, &(0x7f0000000500)={0x0, 0x5e87, 0x0, 0x0, 0x337}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000006}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x24008080) syz_usb_connect$hid(0x3, 0x41, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.349252779s ago: executing program 3 (id=531): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0xff, 0x0, 0x3, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x40, 0x0, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffeb) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x201e, 0x200, 0x70bd25, 0x25dfdbfb, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x24044084}, 0x4) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000b40)=ANY=[], 0x3261e) 3.837677226s ago: executing program 3 (id=536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000000)=0x3) syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) 3.761949978s ago: executing program 3 (id=539): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000002c0)={0x84, @broadcast, 0x4e21, 0x4, 'lblcr\x00', 0x5f, 0x10000004, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0xa, 0x5, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000200)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x5, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @dev, @mcast1, [@dstopts={0x4}]}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, 0x0, &(0x7f0000000080)=0x41) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x4e23, 0x10000, 0x1cb, 0x12c61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e24, 0x3, 'lc\x00', 0x18, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) unshare(0x28000600) perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x0, 0x5, 0x0, 0x2, 0x0, 0x200, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x100a9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.70854051s ago: executing program 3 (id=542): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='^', 0x1, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0xda90) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') preadv(r2, &(0x7f0000001400)=[{0x0}], 0x1, 0xc002a0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.246606685s ago: executing program 1 (id=545): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000040)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r6) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2.529954638s ago: executing program 3 (id=549): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5423) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x66099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x81, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) recvmmsg(r1, &(0x7f00000023c0), 0x0, 0x10020, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) unshare(0x2c040480) r2 = open(&(0x7f0000000300)='./cgroup\x00', 0x8000, 0x196) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000140)={[{@resuid}, {@noauto_da_alloc}, {@auto_da_alloc_val}, {@stripe={'stripe', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@minixdf}, {@nouid32}, {@dioread_lock}, {@nolazytime}, {@oldalloc}, {@usrquota}]}, 0x0, 0x515, &(0x7f0000000c40)="$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") quotactl_fd$Q_SYNC(r3, 0xffffffff80000102, 0x0, 0x0) shutdown(r1, 0x2) flistxattr(r1, &(0x7f0000000280)=""/146, 0x92) mlockall(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000003247d60b7030000030a00006a0a00fe0000000c85000000c4000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35149a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e571f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521f9e3dbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b13fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc90307f5f7a9cb7f1e5ed79dbf92e5d9c3f40a1313db007da349939e8805418029fef1be9f8729d4f1e43572059a7b4564d00"/2848], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffd78, 0x10, &(0x7f0000000000), 0x143}, 0x48) clock_settime(0x2, 0x0) 2.529275658s ago: executing program 2 (id=550): newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@jqfmt_vfsold}, {@nouid32}, {@noblock_validity}, {@delalloc}, {@jqfmt_vfsold}, {@nouid32}, {@nomblk_io_submit}, {@noinit_itable}, {@errors_remount}], [{@hash}, {@euid_lt={'euid<', r0}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r1, 0x0, 0xfff, 0x9) write$UHID_INPUT(r1, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) 2.410092972s ago: executing program 1 (id=551): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f00000000c0)=[{0x1, 0xfffe}, {0x2}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x1, 0x5, 0x1ff]) semctl$SETVAL(r0, 0x2, 0x10, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803", 0x3d}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) semop(r0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}, {0x1, 0x8, 0x1800}, {0x1, 0x3, 0x1000}], 0x3) 2.265441016s ago: executing program 2 (id=552): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000002c0)={0x84, @broadcast, 0x4e21, 0x4, 'lblcr\x00', 0x5f, 0x10000004, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0xa, 0x5, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000200)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x5, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @dev, @mcast1, [@dstopts={0x4}]}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, 0x0, &(0x7f0000000080)=0x41) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x4e23, 0x10000, 0x1cb, 0x12c61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e24, 0x3, 'lc\x00', 0x18, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) unshare(0x28000600) perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x0, 0x5, 0x0, 0x2, 0x0, 0x200, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x100a9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.230227848s ago: executing program 2 (id=553): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x48810) mmap(&(0x7f00002e2000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0xa4f20000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x100, r3, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1b}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xdf}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1a}]}, 0x100}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000200000046000000000000009500007b00000000850000001800000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) 2.079764362s ago: executing program 2 (id=554): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@mblk_io_submit}]}, 0x1, 0x7b2, &(0x7f00000009c0)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000440)=ANY=[@ANYBLOB="24bdd86e8a49997be29b6ac82fafa538000001", @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf252000000008000300", @ANYRES32=r5, @ANYBLOB="1c002d80050004000100000008000300040000000800020003000000"], 0x38}}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r9) r11 = syz_clone(0x80a00011, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0x0, 0xffffffff}) r12 = syz_pidfd_open(r11, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r12, 0xff01, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x8971, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)={0xb4, r10, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x20, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x6c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xb4}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r4, 0xc5e3d0502424878b, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x17}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008080}, 0x40000000) shmdt(0x0) r15 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=@gettaction={0x100, 0x32, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xb}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf6}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x161a82, 0x149) 1.929545097s ago: executing program 5 (id=555): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@nouid32}, {@noblock_validity}, {@delalloc}, {@jqfmt_vfsold}, {@nouid32}, {@nomblk_io_submit}, {@noinit_itable}, {@errors_remount}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r0, 0x0, 0xfff, 0x9) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) (fail_nth: 2) 1.929240997s ago: executing program 1 (id=556): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES16], 0x14) 1.876557499s ago: executing program 1 (id=557): capget(&(0x7f0000000b00)={0x20071026}, &(0x7f0000000b40)={0x9, 0x1, 0xf2, 0x7, 0x4a80, 0x9}) 1.84328973s ago: executing program 1 (id=558): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40c42, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000240)=0x3e) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000020) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000003b00000000000000b2513643723c301aa7f98b4bd985c9e1d3641cd8432155b5bb741dbf4615ab7479478db81ec9ddb7786384", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000008b00000073119f00000000009500000000000000e97c03e292d90849b589e04d04748507b477cf64d5709844ef4944f6437e271f3ac95d4692bdf2b14916e2db439d6319cc4637a7e58832"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x80000001, 0x7}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) unshare(0x28000600) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, 0x0, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x4, 0x4f, 0x3, 0x0, 0x0, 0x8, 0x80000, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0xfffffffffffffffd, 0xa81}, 0x40, 0xfffffffffffffff9, 0xffff0001, 0x1, 0xcac3, 0x45, 0xff, 0x0, 0x6, 0x0, 0x80}, 0xffffffffffffffff, 0xb, r3, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f00000003c0)='nojournal_checksum') sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) pwrite64(r9, &(0x7f0000000000)="875b", 0x2, 0x8080c61) fallocate(r9, 0x3, 0x80007, 0x8000c60) 1.677307116s ago: executing program 5 (id=559): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='^', 0x1, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0xda90) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.54244461s ago: executing program 0 (id=560): capget(&(0x7f0000000b00)={0x20071026}, &(0x7f0000000b40)={0x9, 0x1, 0xf2, 0x7, 0x4a80, 0x9}) (fail_nth: 1) 1.287105508s ago: executing program 0 (id=561): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000001000)={@rand_addr, @dev}, &(0x7f0000000040)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r4, &(0x7f0000000300)='1\x00', 0x2) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780), 0x4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/slabinfo\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x11, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400}], &(0x7f0000000300)='syzkaller\x00', 0x10, 0xc2, &(0x7f0000000680)=""/194, 0x40f00, 0x19, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000007c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0xf, 0x2, 0x10001}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000880)=[r6], &(0x7f00000008c0)=[{0x0, 0x3, 0xd, 0xa}, {0x5, 0x5, 0x7, 0xb}], 0x10, 0x4}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x11, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400}], &(0x7f0000000300)='syzkaller\x00', 0x10, 0xc2, &(0x7f0000000680)=""/194, 0x40f00, 0x19, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000007c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0xf, 0x2, 0x10001}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000880)=[r6], &(0x7f00000008c0)=[{0x0, 0x3, 0xd, 0xa}, {0x5, 0x5, 0x7, 0xb}], 0x10, 0x4}, 0x94) r7 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005dc000/0x2000)=nil, 0x2000, 0x1000000, 0x4000010, r7, 0x8fd9e000) (async) mmap(&(0x7f00005dc000/0x2000)=nil, 0x2000, 0x1000000, 0x4000010, r7, 0x8fd9e000) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3001018, &(0x7f0000000140), 0x3e, 0x51a, &(0x7f0000001200)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000fe}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) (async) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000400)={0x0, 0xd386, 0x0, 0x2, 0x7f, 0x0, r8}, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x110, &(0x7f0000000400)={0x0, 0xd386, 0x0, 0x2, 0x7f, 0x0, r8}, 0x0, 0x0, 0x0) 1.23327s ago: executing program 3 (id=562): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0x46c, 0x65, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x440, 0x2, [@TCA_BPF_ACT={0x43c, 0x1, [@m_xt={0x120, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xe8, 0xa, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9b6, 0x7, 0x4, 0x1b}}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x95, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e6f0136028c9b46b33e74015138ea6ba9c60c29dd78378bb28567c803e2a63a94c5fba4bb4bb2adcab7d81ccda8c5f8e000b81344003a049b8353b716e0d9c0c6c5fbd0a6ac6532013f1ee7bfec23f8da74544263415dacc108fada4f83a23b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x158, 0x1b, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3ff, 0xe, 0x8, 0x4, 0x1}, 0x2}}]}, {0xdd, 0x6, "da72a81d3f185dffb86a2a0c1a283af31d7cc16e9b39f3c58394749a5e7cf990a8aa66b0640f26aa370eb9d52708765298213bc5a7745359a3b7dea606c209494997403e3f61b96cb903e2e37975650aaee679d8db2b02550982fca6d8ad6912a7514c784a7a20ad5a5c711db53ab794c49f14fff923a18f748938b278742dc1ccbddd5444087f08f3ebb92fce5bc464885cc9dd1f884c1555195968ab8107315c144be23ab095fc8cb6c202a2a7e34081b29c0333069c0257b3a3e91d2a40e1d80a419d11dcba523939e17d7c96f0c8ec82121ef8daa0af5e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}, @m_connmark={0xd8, 0x9, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x7, 0x1, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x7ff, 0x20000000, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x20000000, 0x6, 0x6a}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0xfffffffffffffff7, 0x9, 0x7}, 0x6}}]}, {0x19, 0x6, "b243cf248ea5504cf7e5a67f45c10cd2a166afa2d8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x46c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x20}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x1c}}, 0x48000) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 501.881484ms ago: executing program 5 (id=563): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000002c0)={0x84, @broadcast, 0x4e21, 0x4, 'lblcr\x00', 0x5f, 0x10000004, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0xa, 0x5, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000200)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x5, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @dev, @mcast1, [@dstopts={0x4}]}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, 0x0, &(0x7f0000000080)=0x41) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x4e23, 0x10000, 0x1cb, 0x12c61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e24, 0x3, 'lc\x00', 0x18, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) unshare(0x28000600) perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x0, 0x5, 0x0, 0x2, 0x0, 0x200, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x100a9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000f40)={'#! ', './bus'}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 467.785074ms ago: executing program 5 (id=564): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x10) r0 = socket$inet6(0xa, 0x3, 0x8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0x20, 0x10}, 0x4c000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x10001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000540)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)'], 0x28}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x3, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe, 0x9}}}}}, 0x0) rmdir(&(0x7f00000002c0)='./cgroup/../file0\x00') syz_clone3(&(0x7f0000000240)={0x200a04000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) 438.686426ms ago: executing program 5 (id=565): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00c656", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fddbdf25620000000600b400860200000600b300020000000600b4000b0600000600b400d00a00000600b400320900000600b300030000000600b30001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0x38, 0x65, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x20}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xa6ff, &(0x7f0000000300)={&(0x7f00000007c0)={0x38, r2, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xffffffff}}}}, [@NL80211_ATTR_HE_OBSS_PD={0x10, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048014}, 0x24000040) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x13c, r2, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2a}}}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7fe0e7154f071611f513068d8c11158bd09c343bb65bd9c7e9afb102e5655d60"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="640e81290aad4b49871be082f272345a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ae6907bd379f91609802cce4244b1b5a"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6a4ccbf06bcc37b1577a7e5877a8f4a58b27f9a4bfc40512"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f732eaf0cfecabc8d3b9c3760ef5dc929c47fec24fdb17fe3842ad6099b7a433"}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7a3de4c80766eb8f3b21af3677bcb9442499af7d8c79f9b6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "41c72c77a73680cb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2dbe94fb1b0ffc4ccdde0cc3717712bc2f77947be98d6137"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7af3f16d1ea6d8be4cdd2148c2d8cb07"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffff}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x5}, 0x81) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x8000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3, 0x2800}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x1c}}, 0x48000) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 161.354864ms ago: executing program 2 (id=566): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@nouid32}, {@noblock_validity}, {@delalloc}, {@jqfmt_vfsold}, {@nouid32}, {@nomblk_io_submit}, {@noinit_itable}, {@errors_remount}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r0, 0x0, 0xfff, 0x9) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) 52.116168ms ago: executing program 2 (id=567): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES16], 0x14) 17.475549ms ago: executing program 5 (id=568): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100, 0x4fc5, 0x0, 0x0, 0x80000001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = fsmount(r0, 0x0, 0x0) (rerun: 32) fchdir(r1) (async) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0xb000000}}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0xffffffffffffffff, 0x3e, 0xb1, 0xd}, 0x20) (async, rerun: 32) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) (rerun: 32) getdents64(r2, &(0x7f00000000c0)=""/55, 0x37) rename(0x0, &(0x7f00000001c0)='./file0\x00') syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") (async) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) fremovexattr(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='btrfs,\x00']) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x1, 0x0) fcntl$setpipe(r7, 0x407, 0xffffffff80000002) (async) write(r5, 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) (async) syz_pidfd_open(0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000080)={r10, 0x9}, &(0x7f0000000180)=0x8) 0s ago: executing program 1 (id=569): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async, rerun: 64) io_setup(0x4, &(0x7f00000014c0)=0x0) (rerun: 64) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r4, 0x0}]) (async) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f00000002c0)={0x2, 0xd1, "9129df2eda55bee18379c6314273117799e7c9c113c339acfcac62fbfee41f4875b6a9b00a358be7d69b56ad997d077bf2d34758d31ce33c81153897ec45cc58f04327183337a5ea6bb368adb69fe8a1aa64ff162136a52503739d983bd0accd036ea363c71b59e9a4a639df96429aa93ff1a9ba5f0148d7af68e1783a45caa1f050f001054fa144ca5f8498c3b9e46a9dbeb79984968aa6677c20f0fef1795a2991dbed7881ea4932818f09c10cf40d1c2ba2a83bbd9823a7c0ad1dd1db7899335ce4e93eedbdb2d0f3fb4fcf6f2629c7"}) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_newaddr={0xffffffffffffffe9, 0x14, 0x1, 0x70bd24, 0x25dfdbff, {0x2, 0x20, 0x10, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_LABEL={0x14, 0x3, 'veth0_to_bond\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x40003, 0x9, 0x5, 0x8}}]}, 0x48}}, 0x40000c0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd27, 0x700, {0x0, 0x0, 0x0, 0x0, 0x6000, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010100}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x440b0) (rerun: 64) kernel console output (not intermixed with test programs): 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.707976][ T4295] RSP: 002b:00007f37f86af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 102.708022][ T4295] RAX: ffffffffffffffda RBX: 00007f37f9ed5fa0 RCX: 00007f37f9c5ce59 [ 102.708035][ T4295] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 102.708046][ T4295] RBP: 00007f37f86af090 R08: 0000000000000000 R09: 0000000000000000 [ 102.708064][ T4295] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.708080][ T4295] R13: 00007f37f9ed6038 R14: 00007f37f9ed5fa0 R15: 00007ffeb375b2a8 [ 102.708098][ T4295] [ 102.986522][ T4299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.243'. [ 103.048839][ T4304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'. [ 103.073747][ T4304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.087727][ T4304] macvlan2: entered promiscuous mode [ 103.093354][ T4304] macvlan2: entered allmulticast mode [ 103.099734][ T4304] bond1: (slave macvlan2): Opening slave failed [ 103.136584][ T4307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'. [ 103.152128][ T4307] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 103.168595][ T4304] macvlan2: entered promiscuous mode [ 103.174292][ T4304] macvlan2: entered allmulticast mode [ 103.180260][ T4304] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 103.354405][ T4308] loop4: detected capacity change from 0 to 256 [ 103.371605][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 103.371636][ T28] audit: type=1400 audit(1781015467.023:245): avc: denied { create } for pid=4315 comm="syz.0.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.440834][ T28] audit: type=1400 audit(1781015467.053:246): avc: denied { write } for pid=4315 comm="syz.0.249" path="socket:[7136]" dev="sockfs" ino=7136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.497279][ T4321] pim6reg: entered allmulticast mode [ 103.508527][ T4308] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.646586][ T4327] loop0: detected capacity change from 0 to 2048 [ 103.670635][ T4308] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 103.670697][ T4327] EXT4-fs: Ignoring removed bh option [ 103.685480][ T4308] FAT-fs (loop4): Filesystem has been set read-only [ 103.706962][ T4327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.725258][ T4308] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 103.740291][ T28] audit: type=1400 audit(1781015467.383:247): avc: denied { mount } for pid=4326 comm="syz.0.253" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 103.747071][ T4327] EXT4-fs error (device loop0): ext4_ext_precache:631: inode #2: comm syz.0.253: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 103.830228][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.992098][ T4343] loop3: detected capacity change from 0 to 128 [ 104.142406][ T4345] sctp: [Deprecated]: syz.0.255 (pid 4345) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.142406][ T4345] Use struct sctp_sack_info instead [ 104.164604][ T28] audit: type=1326 audit(1781015467.813:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4245 comm="syz.1.225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10a85ce59 code=0x7fc00000 [ 104.246573][ T4346] sctp: [Deprecated]: syz.3.257 (pid 4346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.246573][ T4346] Use struct sctp_sack_info instead [ 104.268529][ T4337] loop2: detected capacity change from 0 to 256 [ 104.287140][ T28] audit: type=1400 audit(1781015467.923:249): avc: denied { create } for pid=4349 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 104.359939][ T4337] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.414749][ T28] audit: type=1326 audit(1781015468.063:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.0.259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67670ce59 code=0x7ffc0000 [ 104.483135][ T28] audit: type=1326 audit(1781015468.063:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.0.259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67670ce59 code=0x7ffc0000 [ 104.517355][ T4357] syz.0.259 uses obsolete (PF_INET,SOCK_PACKET) [ 104.570642][ T28] audit: type=1326 audit(1781015468.063:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.0.259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67670ce59 code=0x7ffc0000 [ 104.571980][ T4337] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 104.655830][ T28] audit: type=1326 audit(1781015468.063:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.0.259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67670ce59 code=0x7ffc0000 [ 104.671655][ T4337] FAT-fs (loop2): Filesystem has been set read-only [ 104.731232][ T4337] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 104.743446][ T28] audit: type=1326 audit(1781015468.063:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.0.259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff67670ce59 code=0x7ffc0000 [ 104.936430][ T4373] FAULT_INJECTION: forcing a failure. [ 104.936430][ T4373] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 104.967681][ T4373] CPU: 1 UID: 0 PID: 4373 Comm: syz.3.266 Not tainted syzkaller #0 PREEMPT(lazy) [ 104.967790][ T4373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 104.967806][ T4373] Call Trace: [ 104.967816][ T4373] [ 104.967827][ T4373] __dump_stack+0x1d/0x30 [ 104.967860][ T4373] dump_stack_lvl+0x95/0xd0 [ 104.967883][ T4373] dump_stack+0x15/0x1b [ 104.968024][ T4373] should_fail_ex+0x263/0x280 [ 104.968047][ T4373] should_fail+0xb/0x20 [ 104.968066][ T4373] should_fail_usercopy+0x1a/0x20 [ 104.968090][ T4373] _copy_from_iter+0xcf/0xea0 [ 104.968120][ T4373] ? __rcu_read_unlock+0x4e/0x70 [ 104.968213][ T4373] ? terminate_walk+0x1e6/0x210 [ 104.968311][ T4373] ? path_openat+0x1ab2/0x2050 [ 104.968349][ T4373] tun_get_user+0x38c/0x27e0 [ 104.968447][ T4373] ? ref_tracker_alloc+0x1eb/0x2f0 [ 104.968509][ T4373] ? selinux_file_permission+0x1e1/0x320 [ 104.968537][ T4373] tun_chr_write_iter+0x15e/0x210 [ 104.968616][ T4373] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 104.968747][ T4373] vfs_write+0x5a6/0x9f0 [ 104.968862][ T4373] ksys_write+0xdc/0x1a0 [ 104.968987][ T4373] __x64_sys_write+0x40/0x50 [ 104.969069][ T4373] x64_sys_call+0x27e1/0x3020 [ 104.969129][ T4373] do_syscall_64+0x12c/0x3b0 [ 104.969174][ T4373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.969204][ T4373] RIP: 0033:0x7f42b4e5ce59 [ 104.969225][ T4373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.969255][ T4373] RSP: 002b:00007f42b38b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.969284][ T4373] RAX: ffffffffffffffda RBX: 00007f42b50d5fa0 RCX: 00007f42b4e5ce59 [ 104.969303][ T4373] RDX: 0000000000000026 RSI: 0000200000000240 RDI: 0000000000000003 [ 104.969320][ T4373] RBP: 00007f42b38b7090 R08: 0000000000000000 R09: 0000000000000000 [ 104.969338][ T4373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.969432][ T4373] R13: 00007f42b50d6038 R14: 00007f42b50d5fa0 R15: 00007ffc0e760b88 [ 104.969458][ T4373] [ 105.236169][ T4370] loop0: detected capacity change from 0 to 128 [ 105.266148][ T4370] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.281351][ T4370] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 105.282156][ T4350] loop1: detected capacity change from 0 to 1024 [ 105.493628][ T4350] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 105.864953][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.877194][ T4384] FAULT_INJECTION: forcing a failure. [ 105.877194][ T4384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.900908][ T4384] CPU: 1 UID: 0 PID: 4384 Comm: syz.1.268 Not tainted syzkaller #0 PREEMPT(lazy) [ 105.900967][ T4384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 105.900984][ T4384] Call Trace: [ 105.900993][ T4384] [ 105.901004][ T4384] __dump_stack+0x1d/0x30 [ 105.901069][ T4384] dump_stack_lvl+0x95/0xd0 [ 105.901093][ T4384] dump_stack+0x15/0x1b [ 105.901119][ T4384] should_fail_ex+0x263/0x280 [ 105.901145][ T4384] should_fail+0xb/0x20 [ 105.901162][ T4384] should_fail_usercopy+0x1a/0x20 [ 105.901184][ T4384] _copy_to_user+0x20/0xa0 [ 105.901220][ T4384] simple_read_from_buffer+0xb5/0x130 [ 105.901271][ T4384] proc_fail_nth_read+0x10e/0x150 [ 105.901310][ T4384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.901344][ T4384] vfs_read+0x1ab/0x7f0 [ 105.901378][ T4384] ? __rcu_read_unlock+0x4e/0x70 [ 105.901405][ T4384] ? __fget_files+0x184/0x1c0 [ 105.901512][ T4384] ? mutex_lock+0x57/0x90 [ 105.901621][ T4384] ksys_read+0xdc/0x1a0 [ 105.901660][ T4384] __x64_sys_read+0x40/0x50 [ 105.901733][ T4384] x64_sys_call+0x2886/0x3020 [ 105.901766][ T4384] do_syscall_64+0x12c/0x3b0 [ 105.901849][ T4384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.901879][ T4384] RIP: 0033:0x7fa10a81d68e [ 105.901901][ T4384] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 105.901924][ T4384] RSP: 002b:00007fa1092aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.901951][ T4384] RAX: ffffffffffffffda RBX: 00007fa1092af6c0 RCX: 00007fa10a81d68e [ 105.901969][ T4384] RDX: 000000000000000f RSI: 00007fa1092af0a0 RDI: 0000000000000004 [ 105.902039][ T4384] RBP: 00007fa1092af090 R08: 0000000000000000 R09: 0000000000000000 [ 105.902056][ T4384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.902072][ T4384] R13: 00007fa10aad6038 R14: 00007fa10aad5fa0 R15: 00007ffef2642828 [ 105.902096][ T4384] [ 106.106731][ T4386] loop0: detected capacity change from 0 to 128 [ 106.127115][ T4386] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 106.139161][ T4386] System zones: 1-3, 19-19, 35-36 [ 106.145201][ T4386] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 106.185775][ T4386] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.270512][ T4386] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 106.306133][ T4391] sctp: [Deprecated]: syz.1.270 (pid 4391) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.306133][ T4391] Use struct sctp_sack_info instead [ 106.355911][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.448617][ T35] IPVS: starting estimator thread 0... [ 106.540140][ T4399] IPVS: using max 1824 ests per chain, 91200 per kthread [ 107.818415][ T4302] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 107.826542][ T4302] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 108.103142][ T4329] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 108.111273][ T4329] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 108.348643][ T4425] FAULT_INJECTION: forcing a failure. [ 108.348643][ T4425] name failslab, interval 1, probability 0, space 0, times 0 [ 108.372186][ T4432] syzkaller0: entered promiscuous mode [ 108.378433][ T4423] No such timeout policy "syz1" [ 108.383236][ T4425] CPU: 1 UID: 0 PID: 4425 Comm: syz.3.282 Not tainted syzkaller #0 PREEMPT(lazy) [ 108.383324][ T4425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 108.383341][ T4425] Call Trace: [ 108.383446][ T4425] [ 108.383501][ T4425] __dump_stack+0x1d/0x30 [ 108.383608][ T4425] dump_stack_lvl+0x95/0xd0 [ 108.383673][ T4425] dump_stack+0x15/0x1b [ 108.383807][ T4425] should_fail_ex+0x263/0x280 [ 108.383874][ T4425] ? ppp_register_net_channel+0x3c/0x360 [ 108.383974][ T4425] should_failslab+0x8c/0xb0 [ 108.384086][ T4425] __kmalloc_cache_noprof+0x5f/0x400 [ 108.384252][ T4425] ppp_register_net_channel+0x3c/0x360 [ 108.384348][ T4425] ppp_register_channel+0x3f/0x50 [ 108.384440][ T4425] ppp_sync_open+0x1f3/0x270 [ 108.384520][ T4425] tty_ldisc_open+0x5d/0xb0 [ 108.384623][ T4425] tty_set_ldisc+0x1db/0x380 [ 108.384758][ T4425] tiocsetd+0x51/0x60 [ 108.384860][ T4425] tty_ioctl+0xa78/0xb80 [ 108.384938][ T4425] ? __pfx_tty_ioctl+0x10/0x10 [ 108.385027][ T4425] __se_sys_ioctl+0xce/0x140 [ 108.385206][ T4425] __x64_sys_ioctl+0x43/0x50 [ 108.385298][ T4425] x64_sys_call+0x1563/0x3020 [ 108.385381][ T4425] do_syscall_64+0x12c/0x3b0 [ 108.385570][ T4425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.385643][ T4425] RIP: 0033:0x7f42b4e5ce59 [ 108.385659][ T4425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.385677][ T4425] RSP: 002b:00007f42b38b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.385696][ T4425] RAX: ffffffffffffffda RBX: 00007f42b50d5fa0 RCX: 00007f42b4e5ce59 [ 108.385733][ T4425] RDX: 0000200000000100 RSI: 0000000000005423 RDI: 0000000000000003 [ 108.385784][ T4425] RBP: 00007f42b38b7090 R08: 0000000000000000 R09: 0000000000000000 [ 108.385826][ T4425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.385875][ T4425] R13: 00007f42b50d6038 R14: 00007f42b50d5fa0 R15: 00007ffc0e760b88 [ 108.385944][ T4425] [ 108.387192][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 108.387233][ T28] audit: type=1400 audit(1781015472.043:330): avc: denied { read append } for pid=4424 comm="syz.3.282" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.399198][ T4432] syzkaller0: entered allmulticast mode [ 108.418210][ T28] audit: type=1400 audit(1781015472.043:331): avc: denied { open } for pid=4424 comm="syz.3.282" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.452322][ T4435] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 108.516376][ T28] audit: type=1400 audit(1781015472.053:332): avc: denied { ioctl } for pid=4424 comm="syz.3.282" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.682907][ T28] audit: type=1400 audit(1781015472.333:333): avc: denied { create } for pid=4444 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.705234][ T28] audit: type=1400 audit(1781015472.353:334): avc: denied { bind } for pid=4444 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.733580][ T28] audit: type=1400 audit(1781015472.353:335): avc: denied { unmount } for pid=4444 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 108.753367][ T28] audit: type=1400 audit(1781015472.383:336): avc: denied { setopt } for pid=4444 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.772904][ T28] audit: type=1400 audit(1781015472.383:337): avc: denied { listen } for pid=4444 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.810667][ T28] audit: type=1400 audit(1781015472.383:338): avc: denied { connect } for pid=4444 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.855504][ T4449] cgroup: none used incorrectly [ 108.870064][ T28] audit: type=1400 audit(1781015472.513:339): avc: denied { read write } for pid=4448 comm="syz.3.290" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 108.931496][ T4455] FAULT_INJECTION: forcing a failure. [ 108.931496][ T4455] name failslab, interval 1, probability 0, space 0, times 0 [ 108.943804][ T4453] netlink: 32 bytes leftover after parsing attributes in process `syz.1.291'. [ 108.944586][ T4455] CPU: 0 UID: 0 PID: 4455 Comm: syz.3.292 Not tainted syzkaller #0 PREEMPT(lazy) [ 108.944721][ T4455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 108.944839][ T4455] Call Trace: [ 108.944861][ T4455] [ 108.944945][ T4455] __dump_stack+0x1d/0x30 [ 108.945056][ T4455] dump_stack_lvl+0x95/0xd0 [ 108.945077][ T4455] dump_stack+0x15/0x1b [ 108.945103][ T4455] should_fail_ex+0x263/0x280 [ 108.945186][ T4455] should_failslab+0x8c/0xb0 [ 108.945299][ T4455] __kmalloc_noprof+0xb8/0x4d0 [ 108.945453][ T4455] ? bpf_test_init+0x86/0x130 [ 108.945576][ T4455] bpf_test_init+0x86/0x130 [ 108.945678][ T4455] bpf_prog_test_run_skb+0x2a9/0x11c0 [ 108.945816][ T4455] ? kstrtoull+0x111/0x140 [ 108.945922][ T4455] ? __rcu_read_unlock+0x4e/0x70 [ 108.946046][ T4455] ? __fget_files+0x184/0x1c0 [ 108.946107][ T4455] ? __rcu_read_unlock+0x4e/0x70 [ 108.946189][ T4455] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 108.946288][ T4455] bpf_prog_test_run+0x204/0x340 [ 108.946386][ T4455] __sys_bpf+0x52e/0x7e0 [ 108.946548][ T4455] __x64_sys_bpf+0x41/0x50 [ 108.946621][ T4455] x64_sys_call+0x10cb/0x3020 [ 108.946706][ T4455] do_syscall_64+0x12c/0x3b0 [ 108.946813][ T4455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.946887][ T4455] RIP: 0033:0x7f42b4e5ce59 [ 108.946969][ T4455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.947089][ T4455] RSP: 002b:00007f42b38b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 108.947173][ T4455] RAX: ffffffffffffffda RBX: 00007f42b50d5fa0 RCX: 00007f42b4e5ce59 [ 108.947222][ T4455] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 108.947264][ T4455] RBP: 00007f42b38b7090 R08: 0000000000000000 R09: 0000000000000000 [ 108.947299][ T4455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.947408][ T4455] R13: 00007f42b50d6038 R14: 00007f42b50d5fa0 R15: 00007ffc0e760b88 [ 108.947469][ T4455] [ 109.043346][ T4463] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 109.092030][ T4453] netlink: 32 bytes leftover after parsing attributes in process `syz.1.291'. [ 109.218401][ T4464] loop2: detected capacity change from 0 to 256 [ 109.271165][ T4462] loop3: detected capacity change from 0 to 1024 [ 109.427173][ T4469] FAULT_INJECTION: forcing a failure. [ 109.427173][ T4469] name failslab, interval 1, probability 0, space 0, times 0 [ 109.506572][ T4469] CPU: 0 UID: 0 PID: 4469 Comm: syz.0.296 Not tainted syzkaller #0 PREEMPT(lazy) [ 109.506599][ T4469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 109.506612][ T4469] Call Trace: [ 109.506618][ T4469] [ 109.506627][ T4469] __dump_stack+0x1d/0x30 [ 109.506659][ T4469] dump_stack_lvl+0x95/0xd0 [ 109.506722][ T4469] dump_stack+0x15/0x1b [ 109.506754][ T4469] should_fail_ex+0x263/0x280 [ 109.506784][ T4469] should_failslab+0x8c/0xb0 [ 109.506817][ T4469] kmem_cache_alloc_noprof+0x66/0x3f0 [ 109.506916][ T4469] ? dst_alloc+0xbd/0x100 [ 109.506941][ T4469] ? __pfx_ip6_dst_gc+0x10/0x10 [ 109.506970][ T4469] dst_alloc+0xbd/0x100 [ 109.507064][ T4469] ip6_rt_cache_alloc+0x259/0x620 [ 109.507111][ T4469] ip6_pol_route+0xdc6/0xeb0 [ 109.507199][ T4469] ip6_pol_route_output+0x40/0x50 [ 109.507232][ T4469] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 109.507321][ T4469] fib6_rule_lookup+0x14b/0x4c0 [ 109.507344][ T4469] ? __schedule+0x951/0xd40 [ 109.507446][ T4469] ip6_route_output_flags+0x1e0/0x2c0 [ 109.507493][ T4469] ip6_dst_lookup_tail+0x4a2/0xab0 [ 109.507526][ T4469] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 109.507573][ T4469] ip6_dst_lookup_flow+0x74/0xf0 [ 109.507599][ T4469] rawv6_sendmsg+0xc37/0x1230 [ 109.507692][ T4469] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 109.507713][ T4469] inet_sendmsg+0xc5/0xd0 [ 109.507748][ T4469] ? __pfx_inet_sendmsg+0x10/0x10 [ 109.507782][ T4469] ____sys_sendmsg+0x519/0x5b0 [ 109.507863][ T4469] ___sys_sendmsg+0x195/0x1e0 [ 109.507893][ T4469] ? path_openat+0x1b01/0x2050 [ 109.507947][ T4469] __sys_sendmmsg+0x185/0x320 [ 109.507988][ T4469] __x64_sys_sendmmsg+0x57/0x70 [ 109.508017][ T4469] x64_sys_call+0x27aa/0x3020 [ 109.508062][ T4469] do_syscall_64+0x12c/0x3b0 [ 109.508134][ T4469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.508164][ T4469] RIP: 0033:0x7ff67670ce59 [ 109.508184][ T4469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.508208][ T4469] RSP: 002b:00007ff675167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 109.508231][ T4469] RAX: ffffffffffffffda RBX: 00007ff676985fa0 RCX: 00007ff67670ce59 [ 109.508325][ T4469] RDX: 0000000000000001 RSI: 0000200000000740 RDI: 0000000000000003 [ 109.508398][ T4469] RBP: 00007ff675167090 R08: 0000000000000000 R09: 0000000000000000 [ 109.508411][ T4469] R10: 0000000004046040 R11: 0000000000000246 R12: 0000000000000001 [ 109.508424][ T4469] R13: 00007ff676986038 R14: 00007ff676985fa0 R15: 00007ffc13c89fe8 [ 109.508445][ T4469] [ 109.764023][ T4471] loop1: detected capacity change from 0 to 128 [ 109.786983][ T4471] vfat: Unknown parameter '000000000000000000000x0000000000000000' [ 110.206517][ T4464] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.260500][ T4464] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 110.269422][ T4464] FAT-fs (loop2): Filesystem has been set read-only [ 110.277716][ T4464] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 110.351893][ T4475] sctp: [Deprecated]: syz.0.298 (pid 4475) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.351893][ T4475] Use struct sctp_sack_info instead [ 110.515737][ T4477] xt_CT: No such helper "snmp_trap" [ 110.633650][ T4487] syzkaller0: entered promiscuous mode [ 110.651714][ T4487] syzkaller0: entered allmulticast mode [ 110.708946][ T4492] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 110.960200][ T4500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.303'. [ 111.034022][ T4505] loop4: detected capacity change from 0 to 2048 [ 111.150415][ T4505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.219639][ T4517] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 111.237430][ T4450] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 111.245908][ T4450] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 111.260726][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.552288][ T4528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.311'. [ 111.587174][ T4529] sctp: [Deprecated]: syz.2.313 (pid 4529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.587174][ T4529] Use struct sctp_sack_info instead [ 111.795255][ T4534] loop4: detected capacity change from 0 to 2048 [ 111.813435][ T4534] EXT4-fs: Ignoring removed bh option [ 111.848097][ T4534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.890732][ T4534] EXT4-fs error (device loop4): ext4_ext_precache:631: inode #2: comm syz.4.315: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 111.946171][ T3301] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz-executor: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 112.151238][ T4538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.164362][ T1628] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.593085][ T4546] FAULT_INJECTION: forcing a failure. [ 112.593085][ T4546] name failslab, interval 1, probability 0, space 0, times 0 [ 112.615780][ T4546] CPU: 1 UID: 0 PID: 4546 Comm: syz.3.318 Not tainted syzkaller #0 PREEMPT(lazy) [ 112.615829][ T4546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 112.615846][ T4546] Call Trace: [ 112.615855][ T4546] [ 112.615866][ T4546] __dump_stack+0x1d/0x30 [ 112.615891][ T4546] dump_stack_lvl+0x95/0xd0 [ 112.615912][ T4546] dump_stack+0x15/0x1b [ 112.615940][ T4546] should_fail_ex+0x263/0x280 [ 112.616008][ T4546] should_failslab+0x8c/0xb0 [ 112.616056][ T4546] __kmalloc_cache_node_noprof+0x6b/0x470 [ 112.616114][ T4546] ? __get_vm_area_node+0x106/0x1d0 [ 112.616161][ T4546] __get_vm_area_node+0x106/0x1d0 [ 112.616208][ T4546] __vmalloc_node_range_noprof+0x25a/0x11c0 [ 112.616274][ T4546] ? copy_process+0x58e/0x2370 [ 112.616325][ T4546] ? __rcu_read_unlock+0x4e/0x70 [ 112.616356][ T4546] ? __rcu_read_unlock+0x4e/0x70 [ 112.616383][ T4546] ? __memcg_slab_post_alloc_hook+0x34f/0x7d0 [ 112.616489][ T4546] __vmalloc_node_noprof+0x89/0xc0 [ 112.616593][ T4546] ? copy_process+0x58e/0x2370 [ 112.616620][ T4546] ? copy_process+0x58e/0x2370 [ 112.616698][ T4546] dup_task_struct+0x22a/0x660 [ 112.616719][ T4546] ? copy_process+0x57d/0x2370 [ 112.616746][ T4546] copy_process+0x58e/0x2370 [ 112.616787][ T4546] ? __rcu_read_unlock+0x4e/0x70 [ 112.616896][ T4546] kernel_clone+0x1c0/0x5f0 [ 112.616926][ T4546] ? vfs_write+0x86e/0x9f0 [ 112.616966][ T4546] __x64_sys_clone+0x143/0x180 [ 112.617041][ T4546] x64_sys_call+0x1222/0x3020 [ 112.617066][ T4546] do_syscall_64+0x12c/0x3b0 [ 112.617110][ T4546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.617139][ T4546] RIP: 0033:0x7f42b4e5ce59 [ 112.617170][ T4546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.617278][ T4546] RSP: 002b:00007f42b38b6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 112.617304][ T4546] RAX: ffffffffffffffda RBX: 00007f42b50d5fa0 RCX: 00007f42b4e5ce59 [ 112.617352][ T4546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040042600 [ 112.617369][ T4546] RBP: 00007f42b38b7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.617383][ T4546] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 112.617395][ T4546] R13: 00007f42b50d6038 R14: 00007f42b50d5fa0 R15: 00007ffc0e760b88 [ 112.617420][ T4546] [ 112.848306][ T4546] syz.3.318: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 112.941601][ T4546] CPU: 1 UID: 0 PID: 4546 Comm: syz.3.318 Not tainted syzkaller #0 PREEMPT(lazy) [ 112.941630][ T4546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 112.941645][ T4546] Call Trace: [ 112.941653][ T4546] [ 112.941716][ T4546] __dump_stack+0x1d/0x30 [ 112.941744][ T4546] dump_stack_lvl+0x95/0xd0 [ 112.941764][ T4546] dump_stack+0x15/0x1b [ 112.941783][ T4546] warn_alloc+0x145/0x1c0 [ 112.941887][ T4546] __vmalloc_node_range_noprof+0x27f/0x11c0 [ 112.941917][ T4546] ? __rcu_read_unlock+0x4e/0x70 [ 112.941948][ T4546] ? __rcu_read_unlock+0x4e/0x70 [ 112.942008][ T4546] ? __memcg_slab_post_alloc_hook+0x34f/0x7d0 [ 112.942047][ T4546] __vmalloc_node_noprof+0x89/0xc0 [ 112.942120][ T4546] ? copy_process+0x58e/0x2370 [ 112.942140][ T4546] ? copy_process+0x58e/0x2370 [ 112.942162][ T4546] dup_task_struct+0x22a/0x660 [ 112.942213][ T4546] ? copy_process+0x57d/0x2370 [ 112.942241][ T4546] copy_process+0x58e/0x2370 [ 112.942307][ T4546] ? __rcu_read_unlock+0x4e/0x70 [ 112.942407][ T4546] kernel_clone+0x1c0/0x5f0 [ 112.942436][ T4546] ? vfs_write+0x86e/0x9f0 [ 112.942475][ T4546] __x64_sys_clone+0x143/0x180 [ 112.942580][ T4546] x64_sys_call+0x1222/0x3020 [ 112.942610][ T4546] do_syscall_64+0x12c/0x3b0 [ 112.942644][ T4546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.942668][ T4546] RIP: 0033:0x7f42b4e5ce59 [ 112.942712][ T4546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.942780][ T4546] RSP: 002b:00007f42b38b6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 112.942803][ T4546] RAX: ffffffffffffffda RBX: 00007f42b50d5fa0 RCX: 00007f42b4e5ce59 [ 112.942817][ T4546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040042600 [ 112.942833][ T4546] RBP: 00007f42b38b7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.942849][ T4546] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 112.942920][ T4546] R13: 00007f42b50d6038 R14: 00007f42b50d5fa0 R15: 00007ffc0e760b88 [ 112.942940][ T4546] [ 112.945446][ T4546] Mem-Info: [ 113.343303][ T4546] active_anon:28406 inactive_anon:0 isolated_anon:0 [ 113.343303][ T4546] active_file:18476 inactive_file:2333 isolated_file:0 [ 113.343303][ T4546] unevictable:0 dirty:19 writeback:0 [ 113.343303][ T4546] slab_reclaimable:3099 slab_unreclaimable:17036 [ 113.343303][ T4546] mapped:44593 shmem:22484 pagetables:1088 [ 113.343303][ T4546] sec_pagetables:0 bounce:0 [ 113.343303][ T4546] kernel_misc_reclaimable:0 [ 113.343303][ T4546] free:1798584 free_pcp:10849 free_cma:0 [ 113.615559][ T1628] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.910003][ T4546] Node 0 active_anon:42052kB inactive_anon:0kB active_file:73904kB inactive_file:9332kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105060kB dirty:76kB writeback:0kB shmem:18480kB kernel_stack:3392kB pagetables:4236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 113.958952][ T4500] syz.0.303 (4500) used greatest stack depth: 8320 bytes left [ 113.992016][ T1628] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.155541][ T4546] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 114.188527][ T4561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 114.280903][ T4562] loop1: detected capacity change from 0 to 256 [ 114.311521][ T4562] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.362542][ T4562] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 114.370992][ T4562] FAT-fs (loop1): Filesystem has been set read-only [ 114.378813][ T4562] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 114.482111][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 114.482137][ T28] audit: type=1400 audit(1781015478.133:356): avc: denied { mount } for pid=4558 comm="syz.2.324" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 114.600584][ T4546] lowmem_reserve[]: 0 2878 7857 7857 [ 114.628609][ T28] audit: type=1400 audit(1781015478.273:357): avc: denied { create } for pid=4558 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.656277][ T4546] Node 0 DMA32 free:2944352kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947980kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 114.732102][ T28] audit: type=1400 audit(1781015478.273:358): avc: denied { write } for pid=4558 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.878010][ T4546] lowmem_reserve[]: 0 0 4978 4978 [ 114.897568][ T4546] Node 0 Normal free:4241380kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38684kB inactive_anon:4kB active_file:74684kB inactive_file:9512kB unevictable:0kB writepending:216kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:142656kB local_pcp:102244kB free_cma:0kB [ 114.940226][ T28] audit: type=1400 audit(1781015478.593:359): avc: denied { ioctl } for pid=4574 comm="syz.0.326" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 114.993668][ T4546] lowmem_reserve[]: 0 0 0 0 [ 114.998455][ T4546] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 115.012576][ T4546] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944352kB [ 115.038044][ T4546] Node 0 Normal: 295*4kB (UME) 242*8kB (UME) 131*16kB (UME) 43*32kB (UME) 21*64kB (UE) 12*128kB (U) 25*256kB (UME) 19*512kB (UE) 13*1024kB (UM) 10*2048kB (UE) 1021*4096kB (UM) = 4241404kB [ 115.057863][ T4546] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 115.067561][ T4546] 24803 total pagecache pages [ 115.073006][ T4546] 1 pages in swap cache [ 115.077292][ T4546] Free swap = 124988kB [ 115.084062][ T4546] Total swap = 124996kB [ 115.088298][ T4546] 2097051 pages RAM [ 115.092862][ T4546] 0 pages HighMem/MovableOnly [ 115.097850][ T4546] 81657 pages reserved [ 115.189507][ T1628] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.246441][ T28] audit: type=1400 audit(1781015478.893:360): avc: denied { bind } for pid=4583 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.340843][ T28] audit: type=1400 audit(1781015478.893:361): avc: denied { name_bind } for pid=4583 comm="syz.2.328" src=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 115.427300][ T1628] bridge_slave_1: left allmulticast mode [ 115.444094][ T4590] loop0: detected capacity change from 0 to 4096 [ 115.450750][ T1628] bridge_slave_1: left promiscuous mode [ 115.462494][ T28] audit: type=1400 audit(1781015478.893:362): avc: denied { node_bind } for pid=4583 comm="syz.2.328" src=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 115.485743][ T1628] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.493527][ T4591] netlink: 36 bytes leftover after parsing attributes in process `syz.2.328'. [ 115.502942][ T4590] ext4: Bad value for 'commit' [ 115.544751][ T1628] bridge_slave_0: left allmulticast mode [ 115.566308][ T1628] bridge_slave_0: left promiscuous mode [ 115.591253][ T28] audit: type=1400 audit(1781015478.923:363): avc: denied { write } for pid=4583 comm="syz.2.328" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 115.615798][ T1628] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.697261][ T28] audit: type=1400 audit(1781015478.923:364): avc: denied { open } for pid=4583 comm="syz.2.328" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 115.746828][ T68] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 115.770111][ T68] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 115.818383][ T28] audit: type=1400 audit(1781015479.053:365): avc: denied { cpu } for pid=4583 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 116.069280][ T1628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.113636][ T1628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.191378][ T1628] bond0 (unregistering): Released all slaves [ 116.210893][ T4595] sctp: [Deprecated]: syz.3.330 (pid 4595) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.210893][ T4595] Use struct sctp_sack_info instead [ 116.310055][ T1628] tipc: Left network mode [ 116.337691][ T1628] hsr_slave_0: left promiscuous mode [ 116.338297][ T4599] loop3: detected capacity change from 0 to 512 [ 116.356025][ T1628] hsr_slave_1: left promiscuous mode [ 116.371651][ T1628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.400988][ T1628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.411730][ T4599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.429052][ T4605] FAULT_INJECTION: forcing a failure. [ 116.429052][ T4605] name failslab, interval 1, probability 0, space 0, times 0 [ 116.444257][ T1628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.453685][ T1628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.458658][ T4599] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.461998][ T4605] CPU: 0 UID: 0 PID: 4605 Comm: syz.1.333 Not tainted syzkaller #0 PREEMPT(lazy) [ 116.462079][ T4605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 116.462123][ T4605] Call Trace: [ 116.462145][ T4605] [ 116.462173][ T4605] __dump_stack+0x1d/0x30 [ 116.462256][ T4605] dump_stack_lvl+0x95/0xd0 [ 116.462430][ T4605] dump_stack+0x15/0x1b [ 116.462501][ T4605] should_fail_ex+0x263/0x280 [ 116.462522][ T4605] should_failslab+0x8c/0xb0 [ 116.462661][ T4605] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 116.462762][ T4605] ? __alloc_skb+0x2d6/0x690 [ 116.462846][ T4605] __alloc_skb+0x2d6/0x690 [ 116.462978][ T4605] ? __alloc_skb+0x200/0x690 [ 116.463053][ T4605] netlink_alloc_large_skb+0xbf/0xf0 [ 116.463220][ T4605] netlink_sendmsg+0x40c/0x6f0 [ 116.463361][ T4605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.463462][ T4605] ____sys_sendmsg+0x563/0x5b0 [ 116.463620][ T4605] ___sys_sendmsg+0x195/0x1e0 [ 116.463736][ T4605] __x64_sys_sendmsg+0xd4/0x160 [ 116.463870][ T4605] x64_sys_call+0x194c/0x3020 [ 116.463969][ T4605] do_syscall_64+0x12c/0x3b0 [ 116.464140][ T4605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.464222][ T4605] RIP: 0033:0x7fa10a85ce59 [ 116.464273][ T4605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.464362][ T4605] RSP: 002b:00007fa1092af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.464425][ T4605] RAX: ffffffffffffffda RBX: 00007fa10aad5fa0 RCX: 00007fa10a85ce59 [ 116.464439][ T4605] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 116.464500][ T4605] RBP: 00007fa1092af090 R08: 0000000000000000 R09: 0000000000000000 [ 116.464541][ T4605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.464587][ T4605] R13: 00007fa10aad6038 R14: 00007fa10aad5fa0 R15: 00007ffef2642828 [ 116.464647][ T4605] [ 116.675278][ T1628] veth1_macvtap: left promiscuous mode [ 116.688937][ T1628] veth0_macvtap: left promiscuous mode [ 116.715591][ T1628] veth1_vlan: left promiscuous mode [ 116.749762][ T1628] veth0_vlan: left promiscuous mode [ 116.860145][ T4619] loop1: detected capacity change from 0 to 128 [ 116.897341][ T4619] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 116.923649][ T4619] System zones: 1-3, 19-19, 35-36 [ 116.952942][ T4619] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 117.044461][ T4619] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.122523][ T4625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.332'. [ 117.212487][ T4619] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 1768304389 (only 1 groups) [ 117.237813][ T1628] team0 (unregistering): Port device team_slave_1 removed [ 117.283968][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.295561][ T1628] team0 (unregistering): Port device team_slave_0 removed [ 117.355383][ T4644] openvswitch: netlink: Missing key (keys=40, expected=80) [ 117.388875][ T4644] netlink: 80 bytes leftover after parsing attributes in process `syz.1.339'. [ 117.401364][ T3024] 8021q: adding VLAN 0 to HW filter on device eth1 [ 117.457445][ T4651] mmap: syz.0.341 (4651) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 117.605601][ T4564] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.630022][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.633079][ T4564] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.646542][ T4564] bridge_slave_0: entered allmulticast mode [ 117.653012][ T4564] bridge_slave_0: entered promiscuous mode [ 117.662212][ T4564] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.672495][ T4564] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.679698][ T4564] bridge_slave_1: entered allmulticast mode [ 117.686677][ T4564] bridge_slave_1: entered promiscuous mode [ 117.745752][ T4564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.756481][ T4564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.813816][ T4564] team0: Port device team_slave_0 added [ 117.822582][ T3024] 8021q: adding VLAN 0 to HW filter on device eth2 [ 117.831046][ T4564] team0: Port device team_slave_1 added [ 117.845389][ T4666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'. [ 117.862764][ T4564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.871836][ T4564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.923342][ T4564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.940593][ T4564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.947947][ T4564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.984224][ T4564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.013115][ T4564] hsr_slave_0: entered promiscuous mode [ 118.019370][ T4564] hsr_slave_1: entered promiscuous mode [ 118.025358][ T4564] debugfs: 'hsr0' already exists in 'hsr' [ 118.032919][ T4564] Cannot create hsr debugfs directory [ 118.184119][ T4688] sctp: [Deprecated]: syz.3.342 (pid 4688) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.184119][ T4688] Use struct sctp_sack_info instead [ 118.468367][ T4709] syzkaller0: entered promiscuous mode [ 118.488217][ T4709] syzkaller0: entered allmulticast mode [ 118.522203][ T4564] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 118.547981][ T4564] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 118.589248][ T3024] 8021q: adding VLAN 0 to HW filter on device eth3 [ 118.596475][ T4564] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 118.618066][ T4564] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.641120][ T4564] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 118.653953][ T4564] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.687959][ T4564] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 118.725655][ T4564] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 118.756967][ T4716] syzkaller0: entered promiscuous mode [ 118.768921][ T4716] syzkaller0: entered allmulticast mode [ 118.783576][ T4716] FAULT_INJECTION: forcing a failure. [ 118.783576][ T4716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.815626][ T4716] CPU: 0 UID: 0 PID: 4716 Comm: syz.1.351 Not tainted syzkaller #0 PREEMPT(lazy) [ 118.815658][ T4716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 118.815702][ T4716] Call Trace: [ 118.815711][ T4716] [ 118.815719][ T4716] __dump_stack+0x1d/0x30 [ 118.815745][ T4716] dump_stack_lvl+0x95/0xd0 [ 118.815805][ T4716] dump_stack+0x15/0x1b [ 118.815824][ T4716] should_fail_ex+0x263/0x280 [ 118.815848][ T4716] should_fail+0xb/0x20 [ 118.815871][ T4716] should_fail_usercopy+0x1a/0x20 [ 118.815899][ T4716] _copy_from_user+0x1c/0xb0 [ 118.815936][ T4716] __copy_msghdr+0x244/0x300 [ 118.815963][ T4716] ___sys_sendmsg+0x10c/0x1e0 [ 118.816003][ T4716] __x64_sys_sendmsg+0xd4/0x160 [ 118.816063][ T4716] x64_sys_call+0x194c/0x3020 [ 118.816104][ T4716] do_syscall_64+0x12c/0x3b0 [ 118.816147][ T4716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.816176][ T4716] RIP: 0033:0x7fa10a85ce59 [ 118.816193][ T4716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.816217][ T4716] RSP: 002b:00007fa1092af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.816304][ T4716] RAX: ffffffffffffffda RBX: 00007fa10aad5fa0 RCX: 00007fa10a85ce59 [ 118.816324][ T4716] RDX: 0000000000000005 RSI: 00002000000000c0 RDI: 0000000000000005 [ 118.816340][ T4716] RBP: 00007fa1092af090 R08: 0000000000000000 R09: 0000000000000000 [ 118.816358][ T4716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.816375][ T4716] R13: 00007fa10aad6038 R14: 00007fa10aad5fa0 R15: 00007ffef2642828 [ 118.816465][ T4716] [ 119.045050][ T4564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.072473][ T4737] netlink: 16 bytes leftover after parsing attributes in process `syz.1.352'. [ 119.094012][ T4564] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.160291][ T3024] 8021q: adding VLAN 0 to HW filter on device eth4 [ 119.173952][ T1675] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.181181][ T1675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.203484][ T1628] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.210619][ T1628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.372333][ T4746] syzkaller0: entered promiscuous mode [ 119.391934][ T4746] syzkaller0: entered allmulticast mode [ 119.540361][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 119.540380][ T28] audit: type=1326 audit(1781015483.193:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.1.354" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa10a85ce59 code=0x7ffc0000 [ 119.630112][ T4564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.683619][ T4765] FAULT_INJECTION: forcing a failure. [ 119.683619][ T4765] name failslab, interval 1, probability 0, space 0, times 0 [ 119.708328][ T4765] CPU: 1 UID: 0 PID: 4765 Comm: syz.1.358 Not tainted syzkaller #0 PREEMPT(lazy) [ 119.708365][ T4765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 119.708394][ T4765] Call Trace: [ 119.708403][ T4765] [ 119.708414][ T4765] __dump_stack+0x1d/0x30 [ 119.708445][ T4765] dump_stack_lvl+0x95/0xd0 [ 119.708484][ T4765] dump_stack+0x15/0x1b [ 119.708508][ T4765] should_fail_ex+0x263/0x280 [ 119.708535][ T4765] should_failslab+0x8c/0xb0 [ 119.708583][ T4765] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 119.708627][ T4765] ? __alloc_skb+0x2d6/0x690 [ 119.708695][ T4765] __alloc_skb+0x2d6/0x690 [ 119.708718][ T4765] ? __alloc_skb+0x200/0x690 [ 119.708751][ T4765] netlink_alloc_large_skb+0xbf/0xf0 [ 119.708789][ T4765] netlink_sendmsg+0x40c/0x6f0 [ 119.708832][ T4765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.708905][ T4765] ____sys_sendmsg+0x563/0x5b0 [ 119.708934][ T4765] ___sys_sendmsg+0x195/0x1e0 [ 119.708977][ T4765] __x64_sys_sendmsg+0xd4/0x160 [ 119.709081][ T4765] x64_sys_call+0x194c/0x3020 [ 119.709111][ T4765] do_syscall_64+0x12c/0x3b0 [ 119.709162][ T4765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.709183][ T4765] RIP: 0033:0x7fa10a85ce59 [ 119.709260][ T4765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.709279][ T4765] RSP: 002b:00007fa1092af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.709303][ T4765] RAX: ffffffffffffffda RBX: 00007fa10aad5fa0 RCX: 00007fa10a85ce59 [ 119.709329][ T4765] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000006 [ 119.709344][ T4765] RBP: 00007fa1092af090 R08: 0000000000000000 R09: 0000000000000000 [ 119.709407][ T4765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.709425][ T4765] R13: 00007fa10aad6038 R14: 00007fa10aad5fa0 R15: 00007ffef2642828 [ 119.709446][ T4765] [ 119.987259][ T4778] FAULT_INJECTION: forcing a failure. [ 119.987259][ T4778] name failslab, interval 1, probability 0, space 0, times 0 [ 120.004117][ T4778] CPU: 0 UID: 0 PID: 4778 Comm: syz.0.360 Not tainted syzkaller #0 PREEMPT(lazy) [ 120.004145][ T4778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 120.004158][ T4778] Call Trace: [ 120.004164][ T4778] [ 120.004171][ T4778] __dump_stack+0x1d/0x30 [ 120.004233][ T4778] dump_stack_lvl+0x95/0xd0 [ 120.004253][ T4778] dump_stack+0x15/0x1b [ 120.004278][ T4778] should_fail_ex+0x263/0x280 [ 120.004387][ T4778] should_failslab+0x8c/0xb0 [ 120.004420][ T4778] __kmalloc_node_noprof+0xc8/0x550 [ 120.004464][ T4778] ? qdisc_alloc+0x65/0x410 [ 120.004500][ T4778] qdisc_alloc+0x65/0x410 [ 120.004593][ T4778] ? mutex_unlock+0x4e/0x90 [ 120.004624][ T4778] ? __rcu_read_unlock+0x4e/0x70 [ 120.004731][ T4778] qdisc_create_dflt+0x7f/0x2b0 [ 120.004767][ T4778] ? dev_activate+0xbb/0x9e0 [ 120.004802][ T4778] dev_activate+0xde/0x9e0 [ 120.004914][ T4778] __dev_open+0x4bd/0x560 [ 120.004956][ T4778] __dev_change_flags+0x1c8/0x490 [ 120.004995][ T4778] netif_change_flags+0x5a/0xd0 [ 120.005074][ T4778] dev_change_flags+0xce/0x190 [ 120.005120][ T4778] dev_ifsioc+0x441/0xfd0 [ 120.005158][ T4778] ? mutex_lock+0x57/0x90 [ 120.005189][ T4778] dev_ioctl+0x709/0x960 [ 120.005260][ T4778] sock_do_ioctl+0x1aa/0x230 [ 120.005304][ T4778] sock_ioctl+0x41b/0x610 [ 120.005338][ T4778] ? mutex_lock+0x57/0x90 [ 120.005451][ T4778] ? __pfx_sock_ioctl+0x10/0x10 [ 120.005538][ T4778] __se_sys_ioctl+0xce/0x140 [ 120.005578][ T4778] __x64_sys_ioctl+0x43/0x50 [ 120.005616][ T4778] x64_sys_call+0x1563/0x3020 [ 120.005708][ T4778] do_syscall_64+0x12c/0x3b0 [ 120.005751][ T4778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.005779][ T4778] RIP: 0033:0x7ff67670ce59 [ 120.005826][ T4778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.005902][ T4778] RSP: 002b:00007ff675167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.005928][ T4778] RAX: ffffffffffffffda RBX: 00007ff676985fa0 RCX: 00007ff67670ce59 [ 120.006003][ T4778] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000004 [ 120.006020][ T4778] RBP: 00007ff675167090 R08: 0000000000000000 R09: 0000000000000000 [ 120.006038][ T4778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.006054][ T4778] R13: 00007ff676986038 R14: 00007ff676985fa0 R15: 00007ffc13c89fe8 [ 120.006085][ T4778] [ 120.007532][ T4778] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 120.009327][ T4780] sctp: [Deprecated]: syz.3.359 (pid 4780) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.009327][ T4780] Use struct sctp_sack_info instead [ 120.052157][ T28] audit: type=1400 audit(1781015483.673:439): avc: denied { write } for pid=4781 comm="syz.1.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.292604][ T28] audit: type=1400 audit(1781015483.943:440): avc: denied { create } for pid=4789 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.312324][ T28] audit: type=1400 audit(1781015483.943:441): avc: denied { setopt } for pid=4789 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.334045][ T4791] tipc: Cannot configure node identity twice [ 120.352796][ T4564] veth0_vlan: entered promiscuous mode [ 120.363097][ T4564] veth1_vlan: entered promiscuous mode [ 120.385604][ T4564] veth0_macvtap: entered promiscuous mode [ 120.395175][ T4564] veth1_macvtap: entered promiscuous mode [ 120.420813][ T4564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.436319][ T4564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.450823][ T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.461113][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.500405][ T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.523129][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.623541][ T4815] syzkaller0: entered promiscuous mode [ 120.629770][ T4815] syzkaller0: entered allmulticast mode [ 120.637437][ T28] audit: type=1400 audit(1781015484.283:442): avc: denied { read } for pid=4816 comm="syz.5.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.662251][ T4815] FAULT_INJECTION: forcing a failure. [ 120.662251][ T4815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.676031][ T4815] CPU: 0 UID: 0 PID: 4815 Comm: syz.0.369 Not tainted syzkaller #0 PREEMPT(lazy) [ 120.676127][ T4815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 120.676143][ T4815] Call Trace: [ 120.676151][ T4815] [ 120.676160][ T4815] __dump_stack+0x1d/0x30 [ 120.676191][ T4815] dump_stack_lvl+0x95/0xd0 [ 120.676218][ T4815] dump_stack+0x15/0x1b [ 120.676237][ T4815] should_fail_ex+0x263/0x280 [ 120.676259][ T4815] should_fail+0xb/0x20 [ 120.676281][ T4815] should_fail_usercopy+0x1a/0x20 [ 120.676358][ T4815] _copy_from_iter+0xcf/0xea0 [ 120.676385][ T4815] ? __rcu_read_unlock+0x4e/0x70 [ 120.676408][ T4815] packet_sendmsg+0x1ef0/0x3240 [ 120.676497][ T4815] ? __rcu_read_unlock+0x6b/0x70 [ 120.676524][ T4815] ? avc_has_perm_noaudit+0xab/0x130 [ 120.676580][ T4815] ? selinux_socket_sendmsg+0x1ab/0x1e0 [ 120.676636][ T4815] ? __pfx_packet_sendmsg+0x10/0x10 [ 120.676670][ T4815] __sys_sendto+0x42e/0x490 [ 120.676842][ T4815] __x64_sys_sendto+0x76/0x90 [ 120.676871][ T4815] x64_sys_call+0x2d35/0x3020 [ 120.676896][ T4815] do_syscall_64+0x12c/0x3b0 [ 120.677010][ T4815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.677040][ T4815] RIP: 0033:0x7ff67670ce59 [ 120.677058][ T4815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.677137][ T4815] RSP: 002b:00007ff675167028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 120.677158][ T4815] RAX: ffffffffffffffda RBX: 00007ff676985fa0 RCX: 00007ff67670ce59 [ 120.677172][ T4815] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 120.677184][ T4815] RBP: 00007ff675167090 R08: 0000200000000140 R09: 0000000000000014 [ 120.677198][ T4815] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 120.677210][ T4815] R13: 00007ff676986038 R14: 00007ff676985fa0 R15: 00007ffc13c89fe8 [ 120.677255][ T4815] [ 121.135541][ T4823] sctp: [Deprecated]: syz.0.372 (pid 4823) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.135541][ T4823] Use struct sctp_sack_info instead [ 121.250219][ T4830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.374'. [ 121.280048][ T28] audit: type=1400 audit(1781015484.893:443): avc: denied { append } for pid=4829 comm="syz.1.374" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 121.301879][ T4833] openvswitch: netlink: Missing key (keys=1000040, expected=200000) [ 121.416104][ T4839] netlink: 'syz.3.376': attribute type 1 has an invalid length. [ 121.424129][ T28] audit: type=1400 audit(1781015484.933:444): avc: denied { mounton } for pid=4831 comm="syz.2.375" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 121.449312][ T4839] netlink: 244 bytes leftover after parsing attributes in process `syz.3.376'. [ 121.536671][ T28] audit: type=1400 audit(1781015484.973:445): avc: denied { watch watch_reads } for pid=4831 comm="syz.2.375" path="/57" dev="tmpfs" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 121.549018][ T4849] SELinux: security policydb version 16 (MLS) not backwards compatible [ 121.602250][ T4848] syzkaller0: entered promiscuous mode [ 121.607944][ T28] audit: type=1400 audit(1781015484.973:446): avc: denied { name_bind } for pid=4828 comm="syz.3.376" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 121.613692][ T4849] SELinux: failed to load policy [ 121.630286][ T4848] syzkaller0: entered allmulticast mode [ 121.639628][ T4851] loop1: detected capacity change from 0 to 512 [ 121.660217][ T4848] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 121.671859][ T4851] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 121.707506][ T28] audit: type=1400 audit(1781015485.113:447): avc: denied { getopt } for pid=4828 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.737224][ T4851] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.778030][ T4851] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 121.815958][ T4851] EXT4-fs (loop1): 1 truncate cleaned up [ 121.822428][ T4851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.878637][ T4860] FAULT_INJECTION: forcing a failure. [ 121.878637][ T4860] name failslab, interval 1, probability 0, space 0, times 0 [ 121.918898][ T4860] CPU: 0 UID: 0 PID: 4860 Comm: syz.0.382 Not tainted syzkaller #0 PREEMPT(lazy) [ 121.918948][ T4860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.918968][ T4860] Call Trace: [ 121.918975][ T4860] [ 121.918984][ T4860] __dump_stack+0x1d/0x30 [ 121.919019][ T4860] dump_stack_lvl+0x95/0xd0 [ 121.919051][ T4860] dump_stack+0x15/0x1b [ 121.919080][ T4860] should_fail_ex+0x263/0x280 [ 121.919121][ T4860] should_failslab+0x8c/0xb0 [ 121.919240][ T4860] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 121.919291][ T4860] ? __alloc_skb+0x2d6/0x690 [ 121.919320][ T4860] __alloc_skb+0x2d6/0x690 [ 121.919351][ T4860] ? __alloc_skb+0x200/0x690 [ 121.919384][ T4860] netlink_alloc_large_skb+0xbf/0xf0 [ 121.919452][ T4860] netlink_sendmsg+0x40c/0x6f0 [ 121.919505][ T4860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.919615][ T4860] ____sys_sendmsg+0x563/0x5b0 [ 121.919659][ T4860] ___sys_sendmsg+0x195/0x1e0 [ 121.919716][ T4860] __x64_sys_sendmsg+0xd4/0x160 [ 121.919765][ T4860] x64_sys_call+0x194c/0x3020 [ 121.919861][ T4860] do_syscall_64+0x12c/0x3b0 [ 121.919911][ T4860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.919944][ T4860] RIP: 0033:0x7ff67670ce59 [ 121.919968][ T4860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.919996][ T4860] RSP: 002b:00007ff675167028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.920071][ T4860] RAX: ffffffffffffffda RBX: 00007ff676985fa0 RCX: 00007ff67670ce59 [ 121.920120][ T4860] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000003 [ 121.920140][ T4860] RBP: 00007ff675167090 R08: 0000000000000000 R09: 0000000000000000 [ 121.920160][ T4860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.920205][ T4860] R13: 00007ff676986038 R14: 00007ff676985fa0 R15: 00007ffc13c89fe8 [ 121.920308][ T4860] [ 122.162638][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.299635][ T4862] loop0: detected capacity change from 0 to 512 [ 122.316170][ T4862] EXT4-fs: Ignoring removed orlov option [ 122.336120][ T4862] EXT4-fs: Ignoring removed nobh option [ 122.363519][ T4862] EXT4-fs (loop0): orphan cleanup on readonly fs [ 122.393619][ T4862] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.383: EA inode hash validation failed [ 122.409242][ T4862] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 122.425333][ T4862] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.383: corrupted inode contents [ 122.437458][ T4862] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.440321][ T4862] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #15: comm syz.0.383: mark_inode_dirty error [ 122.460855][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 122.460882][ C1] EXT4-fs (loop0): initial error at time 1781015487: ext4_do_update_inode:5690: inode 15 [ 122.460922][ C1] EXT4-fs (loop0): last error at time 1781015487: ext4_do_update_inode:5690: inode 15 [ 122.493730][ T4862] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.521687][ T4872] netlink: 128 bytes leftover after parsing attributes in process `syz.3.385'. [ 122.559508][ T4872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.572882][ T4862] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.383: corrupted inode contents [ 122.624335][ T4862] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.626425][ T4862] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.383: mark_inode_dirty error [ 122.648919][ T4819] ipip0: entered promiscuous mode [ 122.671116][ T4862] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.750217][ T4862] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.383: mark inode dirty (error -117) [ 122.793885][ T4886] sctp: [Deprecated]: syz.1.388 (pid 4886) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.793885][ T4886] Use struct sctp_sack_info instead [ 122.832159][ T4862] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.836350][ T4862] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 122.866499][ T4862] EXT4-fs (loop0): 1 orphan inode deleted [ 122.873633][ T4862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 122.919020][ T4894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 122.979042][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.023787][ T4903] netlink: 'syz.2.393': attribute type 21 has an invalid length. [ 123.031975][ T4903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'. [ 123.156914][ T4917] loop0: detected capacity change from 0 to 2048 [ 123.184256][ T4917] loop0: detected capacity change from 0 to 764 [ 123.279513][ T4923] sctp: [Deprecated]: syz.1.401 (pid 4923) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.279513][ T4923] Use struct sctp_sack_info instead [ 123.387561][ T4924] process 'syz.2.393' launched '/dev/fd/16' with NULL argv: empty string added [ 124.049128][ T4944] syzkaller0: entered promiscuous mode [ 124.054697][ T4944] syzkaller0: entered allmulticast mode [ 124.211677][ T4948] tmpfs: Bad value for 'uid' [ 124.242976][ T4953] syzkaller0: entered promiscuous mode [ 124.248553][ T4953] syzkaller0: entered allmulticast mode [ 124.269691][ T4948] tmpfs: Bad value for 'uid' [ 124.271363][ T4949] netlink: 'syz.5.406': attribute type 21 has an invalid length. [ 124.299773][ T4953] FAULT_INJECTION: forcing a failure. [ 124.299773][ T4953] name failslab, interval 1, probability 0, space 0, times 0 [ 124.324016][ T4957] FAULT_INJECTION: forcing a failure. [ 124.324016][ T4957] name failslab, interval 1, probability 0, space 0, times 0 [ 124.343974][ T4953] CPU: 1 UID: 0 PID: 4953 Comm: syz.0.407 Not tainted syzkaller #0 PREEMPT(lazy) [ 124.344009][ T4953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 124.344022][ T4953] Call Trace: [ 124.344032][ T4953] [ 124.344041][ T4953] __dump_stack+0x1d/0x30 [ 124.344069][ T4953] dump_stack_lvl+0x95/0xd0 [ 124.344097][ T4953] dump_stack+0x15/0x1b [ 124.344122][ T4953] should_fail_ex+0x263/0x280 [ 124.344184][ T4953] should_failslab+0x8c/0xb0 [ 124.344218][ T4953] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 124.344259][ T4953] ? __alloc_skb+0x2d6/0x690 [ 124.344304][ T4953] __alloc_skb+0x2d6/0x690 [ 124.344330][ T4953] ? avc_has_perm+0x101/0x190 [ 124.344363][ T4953] ? __alloc_skb+0x200/0x690 [ 124.344384][ T4953] alloc_skb_with_frags+0x7e/0x3d0 [ 124.344416][ T4953] ? ktime_get+0x212/0x240 [ 124.344451][ T4953] ? lapic_next_event+0x11/0x20 [ 124.344477][ T4953] ? clockevents_program_event+0x2fd/0x340 [ 124.344561][ T4953] ? should_fail_ex+0xd9/0x280 [ 124.344581][ T4953] sock_alloc_send_pskb+0x44d/0x500 [ 124.344633][ T4953] tun_get_user+0x653/0x27e0 [ 124.344717][ T4953] ? ref_tracker_alloc+0x1eb/0x2f0 [ 124.344774][ T4953] ? selinux_file_permission+0x1e1/0x320 [ 124.344801][ T4953] tun_chr_write_iter+0x15e/0x210 [ 124.344869][ T4953] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 124.344912][ T4953] vfs_write+0x5a6/0x9f0 [ 124.344981][ T4953] ksys_write+0xdc/0x1a0 [ 124.345074][ T4953] __x64_sys_write+0x40/0x50 [ 124.345107][ T4953] x64_sys_call+0x27e1/0x3020 [ 124.345133][ T4953] do_syscall_64+0x12c/0x3b0 [ 124.345230][ T4953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.345257][ T4953] RIP: 0033:0x7ff67670ce59 [ 124.345300][ T4953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.345319][ T4953] RSP: 002b:00007ff675167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.345410][ T4953] RAX: ffffffffffffffda RBX: 00007ff676985fa0 RCX: 00007ff67670ce59 [ 124.345428][ T4953] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000007 [ 124.345442][ T4953] RBP: 00007ff675167090 R08: 0000000000000000 R09: 0000000000000000 [ 124.345454][ T4953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.345466][ T4953] R13: 00007ff676986038 R14: 00007ff676985fa0 R15: 00007ffc13c89fe8 [ 124.345499][ T4953] [ 124.401250][ T4957] CPU: 0 UID: 0 PID: 4957 Comm: syz.2.408 Not tainted syzkaller #0 PREEMPT(lazy) [ 124.401335][ T4957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 124.401384][ T4957] Call Trace: [ 124.401405][ T4957] [ 124.401427][ T4957] __dump_stack+0x1d/0x30 [ 124.401507][ T4957] dump_stack_lvl+0x95/0xd0 [ 124.401612][ T4957] dump_stack+0x15/0x1b [ 124.401684][ T4957] should_fail_ex+0x263/0x280 [ 124.401793][ T4957] should_failslab+0x8c/0xb0 [ 124.401896][ T4957] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 124.402001][ T4957] ? __alloc_skb+0x2d6/0x690 [ 124.402144][ T4957] __alloc_skb+0x2d6/0x690 [ 124.402210][ T4957] ? __alloc_skb+0x200/0x690 [ 124.402282][ T4957] netlink_alloc_large_skb+0xbf/0xf0 [ 124.402425][ T4957] netlink_sendmsg+0x40c/0x6f0 [ 124.402534][ T4957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.402683][ T4957] ____sys_sendmsg+0x563/0x5b0 [ 124.402777][ T4957] ___sys_sendmsg+0x195/0x1e0 [ 124.402898][ T4957] __x64_sys_sendmsg+0xd4/0x160 [ 124.402996][ T4957] x64_sys_call+0x194c/0x3020 [ 124.403115][ T4957] do_syscall_64+0x12c/0x3b0 [ 124.403233][ T4957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.403305][ T4957] RIP: 0033:0x7f454a34ce59 [ 124.403377][ T4957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.403442][ T4957] RSP: 002b:00007f4548d9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.403510][ T4957] RAX: ffffffffffffffda RBX: 00007f454a5c5fa0 RCX: 00007f454a34ce59 [ 124.403625][ T4957] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 124.403704][ T4957] RBP: 00007f4548d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 124.403747][ T4957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.403774][ T4957] R13: 00007f454a5c6038 R14: 00007f454a5c5fa0 R15: 00007ffdce1632a8 [ 124.403874][ T4957] [ 124.777316][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 124.777335][ T28] audit: type=1326 audit(1781015489.428:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.3.404" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b4e5ce59 code=0x7ffc0000 [ 124.822703][ T28] audit: type=1326 audit(1781015489.428:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.3.404" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f42b4e5cbc2 code=0x7ffc0000 [ 124.912595][ T28] audit: type=1326 audit(1781015489.558:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.3.404" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f42b4e5cc57 code=0x7ffc0000 [ 124.958940][ T28] audit: type=1326 audit(1781015489.558:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.3.404" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b4e5ce59 code=0x7ffc0000 [ 125.005767][ T28] audit: type=1326 audit(1781015489.558:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.3.404" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b4e5ce59 code=0x7ffc0000 [ 125.033357][ T28] audit: type=1326 audit(1781015489.558:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.3.404" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f42b4e19b51 code=0x7ffc0000 [ 125.059109][ T28] audit: type=1326 audit(1781015489.558:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.3.404" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f42b4e5dc49 code=0x7ffc0000 [ 125.113664][ T28] audit: type=1326 audit(1781015489.558:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.3.404" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f42b4e192ac code=0x7ffc0000 [ 125.139312][ T28] audit: type=1326 audit(1781015489.558:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.3.404" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f42b4e19bbb code=0x7ffc0000 [ 125.191766][ T28] audit: type=1326 audit(1781015489.558:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.3.404" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f42b4e1930e code=0x7ffc0000 [ 125.224579][ T4985] sctp: [Deprecated]: syz.2.413 (pid 4985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.224579][ T4985] Use struct sctp_sack_info instead [ 125.242542][ T4987] FAULT_INJECTION: forcing a failure. [ 125.242542][ T4987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.255662][ T4987] CPU: 0 UID: 0 PID: 4987 Comm: syz.0.415 Not tainted syzkaller #0 PREEMPT(lazy) [ 125.255695][ T4987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 125.255711][ T4987] Call Trace: [ 125.255751][ T4987] [ 125.255759][ T4987] __dump_stack+0x1d/0x30 [ 125.255784][ T4987] dump_stack_lvl+0x95/0xd0 [ 125.255807][ T4987] dump_stack+0x15/0x1b [ 125.255837][ T4987] should_fail_ex+0x263/0x280 [ 125.255859][ T4987] should_fail+0xb/0x20 [ 125.255887][ T4987] should_fail_usercopy+0x1a/0x20 [ 125.255911][ T4987] _copy_from_user+0x1c/0xb0 [ 125.255940][ T4987] dev_ethtool+0x52/0x16a0 [ 125.255995][ T4987] ? full_name_hash+0x92/0xe0 [ 125.256022][ T4987] ? strcmp+0x22/0x50 [ 125.256063][ T4987] dev_ioctl+0x2e0/0x960 [ 125.256142][ T4987] sock_do_ioctl+0x1aa/0x230 [ 125.256260][ T4987] sock_ioctl+0x41b/0x610 [ 125.256297][ T4987] ? mutex_lock+0x57/0x90 [ 125.256327][ T4987] ? __pfx_sock_ioctl+0x10/0x10 [ 125.256408][ T4987] __se_sys_ioctl+0xce/0x140 [ 125.256447][ T4987] __x64_sys_ioctl+0x43/0x50 [ 125.256484][ T4987] x64_sys_call+0x1563/0x3020 [ 125.256569][ T4987] do_syscall_64+0x12c/0x3b0 [ 125.256606][ T4987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.256674][ T4987] RIP: 0033:0x7ff67670ce59 [ 125.256690][ T4987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.256777][ T4987] RSP: 002b:00007ff675167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.256802][ T4987] RAX: ffffffffffffffda RBX: 00007ff676985fa0 RCX: 00007ff67670ce59 [ 125.256821][ T4987] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000015 [ 125.256838][ T4987] RBP: 00007ff675167090 R08: 0000000000000000 R09: 0000000000000000 [ 125.256853][ T4987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.256865][ T4987] R13: 00007ff676986038 R14: 00007ff676985fa0 R15: 00007ffc13c89fe8 [ 125.256885][ T4987] [ 125.918612][ T5005] loop1: detected capacity change from 0 to 256 [ 126.089014][ T5005] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.154447][ T5005] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 126.164330][ T5005] FAT-fs (loop1): Filesystem has been set read-only [ 126.173887][ T5005] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 126.374973][ T5009] FAULT_INJECTION: forcing a failure. [ 126.374973][ T5009] name failslab, interval 1, probability 0, space 0, times 0 [ 126.633182][ T5009] CPU: 1 UID: 0 PID: 5009 Comm: syz.2.419 Not tainted syzkaller #0 PREEMPT(lazy) [ 126.633212][ T5009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 126.633274][ T5009] Call Trace: [ 126.633283][ T5009] [ 126.633291][ T5009] __dump_stack+0x1d/0x30 [ 126.633316][ T5009] dump_stack_lvl+0x95/0xd0 [ 126.633336][ T5009] dump_stack+0x15/0x1b [ 126.633417][ T5009] should_fail_ex+0x263/0x280 [ 126.633438][ T5009] should_failslab+0x8c/0xb0 [ 126.633480][ T5009] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 126.633516][ T5009] ? __alloc_skb+0x2d6/0x690 [ 126.633559][ T5009] __alloc_skb+0x2d6/0x690 [ 126.633645][ T5009] ? __alloc_skb+0x200/0x690 [ 126.633743][ T5009] netlink_alloc_large_skb+0xbf/0xf0 [ 126.633776][ T5009] netlink_sendmsg+0x40c/0x6f0 [ 126.633860][ T5009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.633903][ T5009] ____sys_sendmsg+0x563/0x5b0 [ 126.633937][ T5009] ___sys_sendmsg+0x195/0x1e0 [ 126.634065][ T5009] __x64_sys_sendmsg+0xd4/0x160 [ 126.634165][ T5009] x64_sys_call+0x194c/0x3020 [ 126.634192][ T5009] do_syscall_64+0x12c/0x3b0 [ 126.634232][ T5009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.634287][ T5009] RIP: 0033:0x7f454a34ce59 [ 126.634303][ T5009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.634321][ T5009] RSP: 002b:00007f4548d9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.634342][ T5009] RAX: ffffffffffffffda RBX: 00007f454a5c5fa0 RCX: 00007f454a34ce59 [ 126.634361][ T5009] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 126.634378][ T5009] RBP: 00007f4548d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 126.634410][ T5009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.634426][ T5009] R13: 00007f454a5c6038 R14: 00007f454a5c5fa0 R15: 00007ffdce1632a8 [ 126.634450][ T5009] [ 126.996692][ T5015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'. [ 127.627134][ T5044] 8021q: VLANs not supported on lo [ 127.633717][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.429'. [ 127.680715][ T5000] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 127.688716][ T5000] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 129.345640][ T5082] loop5: detected capacity change from 0 to 512 [ 129.363508][ T5082] msdos: Bad value for 'uid' [ 129.368182][ T5082] msdos: Bad value for 'uid' [ 129.779029][ T28] kauditd_printk_skb: 536 callbacks suppressed [ 129.779047][ T28] audit: type=1326 audit(1781015494.438:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.5.439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b7a0ed68e code=0x7ffc0000 [ 129.810728][ T28] audit: type=1326 audit(1781015494.438:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.5.439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b7a0ed68e code=0x7ffc0000 [ 129.836087][ T28] audit: type=1326 audit(1781015494.438:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.5.439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b7a0ed68e code=0x7ffc0000 [ 129.861493][ T28] audit: type=1326 audit(1781015494.438:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.5.439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b7a0ed68e code=0x7ffc0000 [ 129.886870][ T28] audit: type=1326 audit(1781015494.438:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.5.439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b7a0ed68e code=0x7ffc0000 [ 129.912483][ T28] audit: type=1326 audit(1781015494.438:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.5.439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b7a0ed68e code=0x7ffc0000 [ 129.937904][ T28] audit: type=1326 audit(1781015494.438:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.5.439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b7a0ed68e code=0x7ffc0000 [ 129.963382][ T28] audit: type=1326 audit(1781015494.438:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.5.439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b7a0ed68e code=0x7ffc0000 [ 129.989102][ T28] audit: type=1326 audit(1781015494.448:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.5.439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b7a0ed68e code=0x7ffc0000 [ 130.014502][ T28] audit: type=1326 audit(1781015494.448:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.5.439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b7a0ed68e code=0x7ffc0000 [ 130.320075][ T5036] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.382780][ T5111] FAULT_INJECTION: forcing a failure. [ 130.382780][ T5111] name failslab, interval 1, probability 0, space 0, times 0 [ 130.407076][ T5111] CPU: 0 UID: 0 PID: 5111 Comm: syz.3.442 Not tainted syzkaller #0 PREEMPT(lazy) [ 130.407114][ T5111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 130.407127][ T5111] Call Trace: [ 130.407152][ T5111] [ 130.407162][ T5111] __dump_stack+0x1d/0x30 [ 130.407243][ T5111] dump_stack_lvl+0x95/0xd0 [ 130.407321][ T5111] dump_stack+0x15/0x1b [ 130.407341][ T5111] should_fail_ex+0x263/0x280 [ 130.407464][ T5111] should_failslab+0x8c/0xb0 [ 130.407496][ T5111] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 130.407597][ T5111] ? __alloc_skb+0x2d6/0x690 [ 130.407627][ T5111] __alloc_skb+0x2d6/0x690 [ 130.407654][ T5111] ? __alloc_skb+0x200/0x690 [ 130.407675][ T5111] netlink_alloc_large_skb+0xbf/0xf0 [ 130.407738][ T5111] netlink_sendmsg+0x40c/0x6f0 [ 130.407849][ T5111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.407945][ T5111] ____sys_sendmsg+0x563/0x5b0 [ 130.407984][ T5111] ___sys_sendmsg+0x195/0x1e0 [ 130.408097][ T5111] __x64_sys_sendmsg+0xd4/0x160 [ 130.408180][ T5111] x64_sys_call+0x194c/0x3020 [ 130.408212][ T5111] do_syscall_64+0x12c/0x3b0 [ 130.408276][ T5111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.408301][ T5111] RIP: 0033:0x7f42b4e5ce59 [ 130.408322][ T5111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.408346][ T5111] RSP: 002b:00007f42b38b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.408372][ T5111] RAX: ffffffffffffffda RBX: 00007f42b50d5fa0 RCX: 00007f42b4e5ce59 [ 130.408401][ T5111] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 130.408421][ T5111] RBP: 00007f42b38b7090 R08: 0000000000000000 R09: 0000000000000000 [ 130.408434][ T5111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.408446][ T5111] R13: 00007f42b50d6038 R14: 00007f42b50d5fa0 R15: 00007ffc0e760b88 [ 130.408466][ T5111] [ 130.960138][ T5124] loop1: detected capacity change from 0 to 512 [ 131.077298][ T5124] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.443: corrupted inode contents [ 131.089915][ T5124] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 131.093940][ T5124] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.443: mark_inode_dirty error [ 131.103575][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 131.103736][ C1] EXT4-fs (loop1): initial error at time 1781015495: ext4_do_update_inode:5690: inode 16 [ 131.103886][ C1] EXT4-fs (loop1): last error at time 1781015495: ext4_do_update_inode:5690: inode 16 [ 131.142978][ T5124] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 131.146170][ T5124] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.443: corrupted inode contents [ 131.168431][ T5124] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 131.171117][ T5124] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.443: mark_inode_dirty error [ 131.192857][ T5124] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 131.196497][ T5124] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.443: corrupted inode contents [ 131.218662][ T5124] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 131.222786][ T5124] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 131.242256][ T5124] loop1: lost filesystem error report for type 5 error -117 [ 131.249554][ T5124] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.443: corrupted inode contents [ 131.269920][ T5124] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 131.272823][ T5124] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.443: mark_inode_dirty error [ 131.294032][ T5124] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 131.296346][ T5124] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 131.315623][ T5124] loop1: lost filesystem error report for type 5 error -117 [ 131.323690][ T5124] EXT4-fs (loop1): 1 truncate cleaned up [ 131.347958][ T5124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.363247][ T5124] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.439095][ T5124] netlink: 'syz.1.443': attribute type 1 has an invalid length. [ 131.447403][ T5124] netlink: 220 bytes leftover after parsing attributes in process `syz.1.443'. [ 131.669289][ T49] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 132.522706][ T5140] veth0: entered promiscuous mode [ 132.659428][ T5149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.450'. [ 132.769018][ T5139] veth0: left promiscuous mode [ 132.796150][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.819719][ T5163] netlink: 32 bytes leftover after parsing attributes in process `syz.5.453'. [ 132.837557][ T5169] FAULT_INJECTION: forcing a failure. [ 132.837557][ T5169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.857551][ T5169] CPU: 1 UID: 0 PID: 5169 Comm: syz.2.454 Not tainted syzkaller #0 PREEMPT(lazy) [ 132.857615][ T5169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 132.857630][ T5169] Call Trace: [ 132.857638][ T5169] [ 132.857647][ T5169] __dump_stack+0x1d/0x30 [ 132.857678][ T5169] dump_stack_lvl+0x95/0xd0 [ 132.857779][ T5169] dump_stack+0x15/0x1b [ 132.857798][ T5169] should_fail_ex+0x263/0x280 [ 132.857841][ T5169] should_fail+0xb/0x20 [ 132.857870][ T5169] should_fail_usercopy+0x1a/0x20 [ 132.857900][ T5169] _copy_from_iter+0xcf/0xea0 [ 132.858005][ T5169] ? alloc_pages_mpol+0x217/0x260 [ 132.858040][ T5169] copy_page_from_iter+0x161/0x1f0 [ 132.858143][ T5169] tun_get_user+0xbe3/0x27e0 [ 132.858194][ T5169] ? ref_tracker_alloc+0x1eb/0x2f0 [ 132.858243][ T5169] tun_chr_write_iter+0x15e/0x210 [ 132.858318][ T5169] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 132.858431][ T5169] vfs_write+0x5a6/0x9f0 [ 132.858466][ T5169] ksys_write+0xdc/0x1a0 [ 132.858496][ T5169] __x64_sys_write+0x40/0x50 [ 132.858573][ T5169] x64_sys_call+0x27e1/0x3020 [ 132.858598][ T5169] do_syscall_64+0x12c/0x3b0 [ 132.858717][ T5169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.858751][ T5169] RIP: 0033:0x7f454a30d68e [ 132.858772][ T5169] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 132.858863][ T5169] RSP: 002b:00007f4548d9efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 132.858949][ T5169] RAX: ffffffffffffffda RBX: 00007f4548d9f6c0 RCX: 00007f454a30d68e [ 132.858967][ T5169] RDX: 0000000000000032 RSI: 0000200000000280 RDI: 00000000000000c8 [ 132.858983][ T5169] RBP: 00007f4548d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 132.859000][ T5169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.859016][ T5169] R13: 00007f454a5c6038 R14: 00007f454a5c5fa0 R15: 00007ffdce1632a8 [ 132.859041][ T5169] [ 133.078586][ T5177] FAULT_INJECTION: forcing a failure. [ 133.078586][ T5177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.094546][ T5177] CPU: 1 UID: 0 PID: 5177 Comm: syz.3.455 Not tainted syzkaller #0 PREEMPT(lazy) [ 133.094585][ T5177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 133.094651][ T5177] Call Trace: [ 133.094662][ T5177] [ 133.094673][ T5177] __dump_stack+0x1d/0x30 [ 133.094708][ T5177] dump_stack_lvl+0x95/0xd0 [ 133.094744][ T5177] dump_stack+0x15/0x1b [ 133.094772][ T5177] should_fail_ex+0x263/0x280 [ 133.094834][ T5177] should_fail+0xb/0x20 [ 133.094859][ T5177] should_fail_usercopy+0x1a/0x20 [ 133.094892][ T5177] strncpy_from_user+0x27/0x250 [ 133.094933][ T5177] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 133.095009][ T5177] do_getname+0x59/0x1c0 [ 133.095037][ T5177] getname_uflags+0x23/0x30 [ 133.095150][ T5177] __x64_sys_execveat+0x5d/0xa0 [ 133.095270][ T5177] x64_sys_call+0x2a33/0x3020 [ 133.095373][ T5177] do_syscall_64+0x12c/0x3b0 [ 133.095423][ T5177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.095456][ T5177] RIP: 0033:0x7f42b4e5ce59 [ 133.095486][ T5177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.095586][ T5177] RSP: 002b:00007f42b38b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 133.095615][ T5177] RAX: ffffffffffffffda RBX: 00007f42b50d5fa0 RCX: 00007f42b4e5ce59 [ 133.095636][ T5177] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 133.095686][ T5177] RBP: 00007f42b38b7090 R08: 0000000000001000 R09: 0000000000000000 [ 133.095706][ T5177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.095792][ T5177] R13: 00007f42b50d6038 R14: 00007f42b50d5fa0 R15: 00007ffc0e760b88 [ 133.095829][ T5177] [ 133.318329][ T5186] SELinux: security policydb version 16 (MLS) not backwards compatible [ 133.336939][ T5186] SELinux: failed to load policy [ 133.345534][ T5186] loop3: detected capacity change from 0 to 512 [ 133.356120][ T5186] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 133.379070][ T5186] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 133.420055][ T5186] EXT4-fs (loop3): 1 truncate cleaned up [ 133.426360][ T5186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.451659][ T5195] macsec1: entered allmulticast mode [ 133.482838][ T5195] ip6gretap0: entered allmulticast mode [ 133.524468][ T5195] ip6gretap0: left allmulticast mode [ 133.703095][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.811200][ T5239] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.463'. [ 134.922204][ T5247] FAULT_INJECTION: forcing a failure. [ 134.922204][ T5247] name failslab, interval 1, probability 0, space 0, times 0 [ 134.935132][ T5247] CPU: 1 UID: 0 PID: 5247 Comm: syz.0.466 Not tainted syzkaller #0 PREEMPT(lazy) [ 134.935224][ T5247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 134.935237][ T5247] Call Trace: [ 134.935243][ T5247] [ 134.935250][ T5247] __dump_stack+0x1d/0x30 [ 134.935335][ T5247] dump_stack_lvl+0x95/0xd0 [ 134.935361][ T5247] dump_stack+0x15/0x1b [ 134.935386][ T5247] should_fail_ex+0x263/0x280 [ 134.935446][ T5247] should_failslab+0x8c/0xb0 [ 134.935484][ T5247] __kmalloc_cache_node_noprof+0x6b/0x470 [ 134.935529][ T5247] ? avc_has_perm_noaudit+0xab/0x130 [ 134.935618][ T5247] ? __get_vm_area_node+0x106/0x1d0 [ 134.935659][ T5247] __get_vm_area_node+0x106/0x1d0 [ 134.935693][ T5247] __vmalloc_node_range_noprof+0x25a/0x11c0 [ 134.935712][ T5247] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 134.935755][ T5247] ? cred_has_capability+0x224/0x2a0 [ 134.935857][ T5247] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 134.935877][ T5247] __vmalloc_noprof+0xa4/0xf0 [ 134.935894][ T5247] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 134.936091][ T5247] bpf_prog_alloc_no_stats+0x47/0x390 [ 134.936112][ T5247] ? bpf_prog_alloc+0x2a/0x150 [ 134.936131][ T5247] bpf_prog_alloc+0x3c/0x150 [ 134.936158][ T5247] bpf_prog_load+0x50d/0x1030 [ 134.936288][ T5247] ? security_bpf+0x2b/0x90 [ 134.936383][ T5247] __sys_bpf+0x505/0x7e0 [ 134.936412][ T5247] __x64_sys_bpf+0x41/0x50 [ 134.936432][ T5247] x64_sys_call+0x10cb/0x3020 [ 134.936597][ T5247] do_syscall_64+0x12c/0x3b0 [ 134.936655][ T5247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.936675][ T5247] RIP: 0033:0x7ff67670ce59 [ 134.936804][ T5247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.936821][ T5247] RSP: 002b:00007ff675167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.936839][ T5247] RAX: ffffffffffffffda RBX: 00007ff676985fa0 RCX: 00007ff67670ce59 [ 134.936851][ T5247] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 134.936863][ T5247] RBP: 00007ff675167090 R08: 0000000000000000 R09: 0000000000000000 [ 134.936874][ T5247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.936885][ T5247] R13: 00007ff676986038 R14: 00007ff676985fa0 R15: 00007ffc13c89fe8 [ 134.936925][ T5247] [ 134.936973][ T5247] syz.0.466: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 135.178196][ T5247] CPU: 0 UID: 0 PID: 5247 Comm: syz.0.466 Not tainted syzkaller #0 PREEMPT(lazy) [ 135.178310][ T5247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 135.178322][ T5247] Call Trace: [ 135.178328][ T5247] [ 135.178361][ T5247] __dump_stack+0x1d/0x30 [ 135.178385][ T5247] dump_stack_lvl+0x95/0xd0 [ 135.178404][ T5247] dump_stack+0x15/0x1b [ 135.178421][ T5247] warn_alloc+0x145/0x1c0 [ 135.178444][ T5247] __vmalloc_node_range_noprof+0x27f/0x11c0 [ 135.178543][ T5247] ? cred_has_capability+0x224/0x2a0 [ 135.178569][ T5247] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 135.178591][ T5247] __vmalloc_noprof+0xa4/0xf0 [ 135.178609][ T5247] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 135.178706][ T5247] bpf_prog_alloc_no_stats+0x47/0x390 [ 135.178727][ T5247] ? bpf_prog_alloc+0x2a/0x150 [ 135.178771][ T5247] bpf_prog_alloc+0x3c/0x150 [ 135.178800][ T5247] bpf_prog_load+0x50d/0x1030 [ 135.178858][ T5247] ? security_bpf+0x2b/0x90 [ 135.178884][ T5247] __sys_bpf+0x505/0x7e0 [ 135.178960][ T5247] __x64_sys_bpf+0x41/0x50 [ 135.178980][ T5247] x64_sys_call+0x10cb/0x3020 [ 135.179002][ T5247] do_syscall_64+0x12c/0x3b0 [ 135.179032][ T5247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.179083][ T5247] RIP: 0033:0x7ff67670ce59 [ 135.179097][ T5247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.179113][ T5247] RSP: 002b:00007ff675167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.179131][ T5247] RAX: ffffffffffffffda RBX: 00007ff676985fa0 RCX: 00007ff67670ce59 [ 135.179161][ T5247] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 135.179236][ T5247] RBP: 00007ff675167090 R08: 0000000000000000 R09: 0000000000000000 [ 135.179248][ T5247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.179260][ T5247] R13: 00007ff676986038 R14: 00007ff676985fa0 R15: 00007ffc13c89fe8 [ 135.179278][ T5247] [ 135.374313][ T5247] Mem-Info: [ 135.377534][ T5247] active_anon:10901 inactive_anon:0 isolated_anon:0 [ 135.377534][ T5247] active_file:10700 inactive_file:12787 isolated_file:0 [ 135.377534][ T5247] unevictable:0 dirty:489 writeback:0 [ 135.377534][ T5247] slab_reclaimable:3230 slab_unreclaimable:17029 [ 135.377534][ T5247] mapped:32423 shmem:3719 pagetables:1237 [ 135.377534][ T5247] sec_pagetables:0 bounce:0 [ 135.377534][ T5247] kernel_misc_reclaimable:0 [ 135.377534][ T5247] free:1875331 free_pcp:10099 free_cma:0 [ 135.422958][ T5247] Node 0 active_anon:43604kB inactive_anon:0kB active_file:42800kB inactive_file:51148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129692kB dirty:1956kB writeback:0kB shmem:14876kB kernel_stack:3584kB pagetables:4948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 135.453281][ T5247] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 135.484534][ T5247] lowmem_reserve[]: 0 2878 7857 7857 [ 135.489971][ T5247] Node 0 DMA32 free:2944352kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947980kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 135.521354][ T5247] lowmem_reserve[]: 0 0 4978 4978 [ 135.526450][ T5247] Node 0 Normal free:4544692kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43256kB inactive_anon:0kB active_file:42800kB inactive_file:51148kB unevictable:0kB writepending:1956kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:37260kB local_pcp:22408kB free_cma:0kB [ 135.559735][ T5247] lowmem_reserve[]: 0 0 0 0 [ 135.564438][ T5247] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 135.577289][ T5247] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944352kB [ 135.597075][ T5247] Node 0 Normal: 1629*4kB (UM) 1122*8kB (UM) 414*16kB (UME) 213*32kB (UME) 164*64kB (UME) 110*128kB (UME) 112*256kB (UME) 81*512kB (UME) 48*1024kB (UME) 31*2048kB (UM) 1055*4096kB (UM) = 4557572kB [ 135.616976][ T5247] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 135.628321][ T5247] 24245 total pagecache pages [ 135.636285][ T5247] 1 pages in swap cache [ 135.640984][ T5247] Free swap = 124992kB [ 135.645219][ T5247] Total swap = 124996kB [ 135.649724][ T5247] 2097051 pages RAM [ 135.653717][ T5247] 0 pages HighMem/MovableOnly [ 135.658690][ T5247] 81657 pages reserved [ 135.681447][ T28] kauditd_printk_skb: 198 callbacks suppressed [ 135.681465][ T28] audit: type=1326 audit(1781015500.338:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.0.469" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67670ce59 code=0x7ffc0000 [ 135.715153][ T28] audit: type=1326 audit(1781015500.368:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.0.469" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff67670ce59 code=0x7ffc0000 [ 135.744319][ T28] audit: type=1400 audit(1781015500.368:1244): avc: denied { getopt } for pid=5253 comm="syz.0.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.764581][ T28] audit: type=1326 audit(1781015500.368:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.0.469" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67670ce59 code=0x7ffc0000 [ 135.792317][ T28] audit: type=1326 audit(1781015500.368:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.0.469" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67670ce59 code=0x7ffc0000 [ 135.818270][ T28] audit: type=1326 audit(1781015500.368:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.0.469" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67670ce59 code=0x7ffc0000 [ 135.850042][ T28] audit: type=1326 audit(1781015500.368:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.0.469" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff67670ce59 code=0x7ffc0000 [ 135.875628][ T5172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.940625][ T28] audit: type=1400 audit(1781015500.398:1249): avc: denied { ioctl } for pid=5250 comm="syz.2.468" path="socket:[9841]" dev="sockfs" ino=9841 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 136.011265][ T28] audit: type=1326 audit(1781015500.498:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.0.469" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff67670ce59 code=0x7ffc0000 [ 136.046057][ T5270] netlink: 165 bytes leftover after parsing attributes in process `syz.1.475'. [ 136.299259][ T5286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.478'. [ 136.428852][ T28] audit: type=1400 audit(1781015501.078:1251): avc: denied { create } for pid=5290 comm="syz.2.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 136.526150][ T5294] loop5: detected capacity change from 0 to 1024 [ 136.548796][ T5294] EXT4-fs: Ignoring removed orlov option [ 136.574613][ T5294] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 136.604608][ T5294] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 136.624017][ T5294] EXT4-fs (loop5): orphan cleanup on readonly fs [ 136.639401][ T5294] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz.5.483: Invalid inode table block 0 in block_group 0 [ 136.653772][ T5294] loop5: lost filesystem error report for type 5 error -117 [ 136.653891][ T5294] EXT4-fs (loop5): Remounting filesystem read-only [ 136.661252][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 136.661277][ C0] EXT4-fs (loop5): initial error at time 1781015501: __ext4_get_inode_loc:4885 [ 136.661313][ C0] EXT4-fs (loop5): last error at time 1781015501: __ext4_get_inode_loc:4885 [ 136.747014][ T5294] EXT4-fs (loop5): 1 truncate cleaned up [ 136.753831][ T5294] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.925959][ T4564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.956613][ T5296] loop3: detected capacity change from 0 to 512 [ 136.994314][ T5296] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 137.014567][ T5296] EXT4-fs (loop3): 1 truncate cleaned up [ 137.023014][ T5302] TC_ACT_REPEAT abuse ? [ 137.026373][ T5296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.462322][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.834451][ T5321] FAULT_INJECTION: forcing a failure. [ 137.834451][ T5321] name failslab, interval 1, probability 0, space 0, times 0 [ 137.936356][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.5.489 Not tainted syzkaller #0 PREEMPT(lazy) [ 137.936403][ T5321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 137.936416][ T5321] Call Trace: [ 137.936424][ T5321] [ 137.936498][ T5321] __dump_stack+0x1d/0x30 [ 137.936607][ T5321] dump_stack_lvl+0x95/0xd0 [ 137.936696][ T5321] dump_stack+0x15/0x1b [ 137.936721][ T5321] should_fail_ex+0x263/0x280 [ 137.936770][ T5321] should_failslab+0x8c/0xb0 [ 137.936805][ T5321] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 137.936882][ T5321] ? __alloc_skb+0x2d6/0x690 [ 137.936911][ T5321] __alloc_skb+0x2d6/0x690 [ 137.936931][ T5321] ? __alloc_skb+0x200/0x690 [ 137.936952][ T5321] netlink_alloc_large_skb+0xbf/0xf0 [ 137.936992][ T5321] netlink_sendmsg+0x40c/0x6f0 [ 137.937029][ T5321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.937140][ T5321] ____sys_sendmsg+0x563/0x5b0 [ 137.937169][ T5321] ___sys_sendmsg+0x195/0x1e0 [ 137.937226][ T5321] __x64_sys_sendmsg+0xd4/0x160 [ 137.937256][ T5321] x64_sys_call+0x194c/0x3020 [ 137.937292][ T5321] do_syscall_64+0x12c/0x3b0 [ 137.937342][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.937406][ T5321] RIP: 0033:0x7f5b7a12ce59 [ 137.937424][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.937443][ T5321] RSP: 002b:00007f5b78b7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.937488][ T5321] RAX: ffffffffffffffda RBX: 00007f5b7a3a5fa0 RCX: 00007f5b7a12ce59 [ 137.937534][ T5321] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000007 [ 137.937547][ T5321] RBP: 00007f5b78b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 137.937560][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.937641][ T5321] R13: 00007f5b7a3a6038 R14: 00007f5b7a3a5fa0 R15: 00007ffdba6c9098 [ 137.937679][ T5321] [ 138.214646][ T5345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.494'. [ 138.466410][ T3024] veth0_vlan: left promiscuous mode [ 138.486749][ T3024] veth0_vlan: entered promiscuous mode [ 138.522614][ T5366] syzkaller0: entered promiscuous mode [ 138.546873][ T5366] syzkaller0: entered allmulticast mode [ 138.667001][ T5340] netlink: 56 bytes leftover after parsing attributes in process `syz.1.493'. [ 138.716656][ T5375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.493'. [ 139.209537][ T5409] FAULT_INJECTION: forcing a failure. [ 139.209537][ T5409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.245191][ T5409] CPU: 0 UID: 0 PID: 5409 Comm: syz.3.506 Not tainted syzkaller #0 PREEMPT(lazy) [ 139.245228][ T5409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 139.245245][ T5409] Call Trace: [ 139.245330][ T5409] [ 139.245339][ T5409] __dump_stack+0x1d/0x30 [ 139.245444][ T5409] dump_stack_lvl+0x95/0xd0 [ 139.245546][ T5409] dump_stack+0x15/0x1b [ 139.245568][ T5409] should_fail_ex+0x263/0x280 [ 139.245591][ T5409] should_fail+0xb/0x20 [ 139.245608][ T5409] should_fail_usercopy+0x1a/0x20 [ 139.245634][ T5409] _copy_from_user+0x1c/0xb0 [ 139.245691][ T5409] __sys_bind+0x106/0x290 [ 139.245724][ T5409] __x64_sys_bind+0x3f/0x50 [ 139.245817][ T5409] x64_sys_call+0x2b30/0x3020 [ 139.245845][ T5409] do_syscall_64+0x12c/0x3b0 [ 139.245889][ T5409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.245956][ T5409] RIP: 0033:0x7f42b4e5ce59 [ 139.245976][ T5409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.246000][ T5409] RSP: 002b:00007f42b38b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 139.246020][ T5409] RAX: ffffffffffffffda RBX: 00007f42b50d5fa0 RCX: 00007f42b4e5ce59 [ 139.246086][ T5409] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000004 [ 139.246098][ T5409] RBP: 00007f42b38b7090 R08: 0000000000000000 R09: 0000000000000000 [ 139.246174][ T5409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.246190][ T5409] R13: 00007f42b50d6038 R14: 00007f42b50d5fa0 R15: 00007ffc0e760b88 [ 139.246210][ T5409] [ 139.430542][ T5410] netlink: 20 bytes leftover after parsing attributes in process `syz.1.503'. [ 139.626180][ T5425] loop3: detected capacity change from 0 to 2048 [ 139.655724][ T5425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.780857][ T5432] loop5: detected capacity change from 0 to 128 [ 139.788172][ T5432] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.943844][ T5431] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 140.627878][ T5432] netlink: 48 bytes leftover after parsing attributes in process `syz.5.511'. [ 141.101609][ T28] kauditd_printk_skb: 144 callbacks suppressed [ 141.101624][ T28] audit: type=1400 audit(1781015505.758:1394): avc: denied { mounton } for pid=5444 comm="syz.0.514" path="/101/file0" dev="tmpfs" ino=551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 141.133362][ T68] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 141.526768][ T5479] netlink: 68 bytes leftover after parsing attributes in process `syz.5.525'. [ 141.594708][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.660130][ T3416] IPVS: starting estimator thread 0... [ 141.759995][ T5494] FAULT_INJECTION: forcing a failure. [ 141.759995][ T5494] name failslab, interval 1, probability 0, space 0, times 0 [ 141.769036][ T5488] IPVS: using max 1632 ests per chain, 81600 per kthread [ 141.795824][ T5496] SELinux: security policydb version 16 (MLS) not backwards compatible [ 141.804274][ T5496] SELinux: failed to load policy [ 141.812441][ T5496] loop3: detected capacity change from 0 to 512 [ 141.838967][ T5494] CPU: 0 UID: 0 PID: 5494 Comm: syz.5.530 Not tainted syzkaller #0 PREEMPT(lazy) [ 141.838996][ T5494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 141.839012][ T5494] Call Trace: [ 141.839093][ T5494] [ 141.839100][ T5494] __dump_stack+0x1d/0x30 [ 141.839159][ T5494] dump_stack_lvl+0x95/0xd0 [ 141.839186][ T5494] dump_stack+0x15/0x1b [ 141.839234][ T5494] should_fail_ex+0x263/0x280 [ 141.839261][ T5494] should_failslab+0x8c/0xb0 [ 141.839362][ T5494] kmem_cache_alloc_noprof+0x66/0x3f0 [ 141.839396][ T5494] ? dst_alloc+0xbd/0x100 [ 141.839422][ T5494] dst_alloc+0xbd/0x100 [ 141.839505][ T5494] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 141.839544][ T5494] ip_route_output_flow+0x65/0x110 [ 141.839575][ T5494] udp_sendmsg+0x1308/0x1500 [ 141.839681][ T5494] ? avc_has_perm+0x101/0x190 [ 141.839726][ T5494] ? __pfx_udp_sendmsg+0x10/0x10 [ 141.839769][ T5494] inet_sendmsg+0xac/0xd0 [ 141.839807][ T5494] ? __pfx_inet_sendmsg+0x10/0x10 [ 141.839893][ T5494] ____sys_sendmsg+0x519/0x5b0 [ 141.839969][ T5494] ___sys_sendmsg+0x195/0x1e0 [ 141.840000][ T5494] ? path_openat+0x1b01/0x2050 [ 141.840043][ T5494] __sys_sendmmsg+0x185/0x320 [ 141.840160][ T5494] __x64_sys_sendmmsg+0x57/0x70 [ 141.840194][ T5494] x64_sys_call+0x27aa/0x3020 [ 141.840315][ T5494] do_syscall_64+0x12c/0x3b0 [ 141.840356][ T5494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.840380][ T5494] RIP: 0033:0x7f5b7a12ce59 [ 141.840396][ T5494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.840473][ T5494] RSP: 002b:00007f5b78b7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 141.840499][ T5494] RAX: ffffffffffffffda RBX: 00007f5b7a3a5fa0 RCX: 00007f5b7a12ce59 [ 141.840518][ T5494] RDX: 0400000000000284 RSI: 0000200000004d00 RDI: 0000000000000004 [ 141.840537][ T5494] RBP: 00007f5b78b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 141.840555][ T5494] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000001 [ 141.840599][ T5494] R13: 00007f5b7a3a6038 R14: 00007f5b7a3a5fa0 R15: 00007ffdba6c9098 [ 141.840619][ T5494] [ 142.090013][ T5496] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 142.142259][ T5496] EXT4-fs (loop3): 1 truncate cleaned up [ 142.154933][ T5507] netlink: 44 bytes leftover after parsing attributes in process `syz.2.534'. [ 142.164569][ T5496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.212062][ T28] audit: type=1400 audit(1781015506.868:1395): avc: denied { write } for pid=5495 comm="syz.3.531" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.251114][ T5509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.535'. [ 142.323802][ T5511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'. [ 142.343301][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.352931][ T5500] netlink: 'syz.1.533': attribute type 2 has an invalid length. [ 142.368274][ T5500] netlink: 'syz.1.533': attribute type 1 has an invalid length. [ 142.385898][ T5500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'. [ 142.680632][ T5530] sctp: [Deprecated]: syz.5.543 (pid 5530) Use of int in maxseg socket option. [ 142.680632][ T5530] Use struct sctp_assoc_value instead [ 142.717688][ T28] audit: type=1400 audit(1781015507.368:1396): avc: denied { listen } for pid=5527 comm="syz.5.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 142.971554][ T5538] syzkaller0: entered promiscuous mode [ 142.977178][ T5538] syzkaller0: entered allmulticast mode [ 143.031609][ T5543] TC_ACT_REPEAT abuse ? [ 143.275296][ T5546] FAULT_INJECTION: forcing a failure. [ 143.275296][ T5546] name failslab, interval 1, probability 0, space 0, times 0 [ 143.298871][ T5546] CPU: 0 UID: 0 PID: 5546 Comm: syz.5.548 Not tainted syzkaller #0 PREEMPT(lazy) [ 143.298941][ T5546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 143.298955][ T5546] Call Trace: [ 143.298962][ T5546] [ 143.298970][ T5546] __dump_stack+0x1d/0x30 [ 143.298995][ T5546] dump_stack_lvl+0x95/0xd0 [ 143.299061][ T5546] dump_stack+0x15/0x1b [ 143.299081][ T5546] should_fail_ex+0x263/0x280 [ 143.299107][ T5546] ? __request_module+0x1c4/0x3c0 [ 143.299140][ T5546] should_failslab+0x8c/0xb0 [ 143.299247][ T5546] ? dev_load+0x61/0xc0 [ 143.299316][ T5546] __kmalloc_cache_noprof+0x5f/0x400 [ 143.299364][ T5546] ? dev_load+0x61/0xc0 [ 143.299505][ T5546] __request_module+0x1c4/0x3c0 [ 143.299608][ T5546] ? capable+0x7b/0xb0 [ 143.299645][ T5546] dev_load+0x61/0xc0 [ 143.299680][ T5546] dev_ioctl+0x6f3/0x960 [ 143.299710][ T5546] sock_do_ioctl+0x1aa/0x230 [ 143.299811][ T5546] sock_ioctl+0x41b/0x610 [ 143.299842][ T5546] ? mutex_lock+0x57/0x90 [ 143.299877][ T5546] ? __pfx_sock_ioctl+0x10/0x10 [ 143.299917][ T5546] __se_sys_ioctl+0xce/0x140 [ 143.299955][ T5546] __x64_sys_ioctl+0x43/0x50 [ 143.299987][ T5546] x64_sys_call+0x1563/0x3020 [ 143.300020][ T5546] do_syscall_64+0x12c/0x3b0 [ 143.300072][ T5546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.300102][ T5546] RIP: 0033:0x7f5b7a12ce59 [ 143.300125][ T5546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.300147][ T5546] RSP: 002b:00007f5b78b5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.300225][ T5546] RAX: ffffffffffffffda RBX: 00007f5b7a3a6090 RCX: 00007f5b7a12ce59 [ 143.300242][ T5546] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000005 [ 143.300257][ T5546] RBP: 00007f5b78b5e090 R08: 0000000000000000 R09: 0000000000000000 [ 143.300306][ T5546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.300322][ T5546] R13: 00007f5b7a3a6128 R14: 00007f5b7a3a6090 R15: 00007ffdba6c9098 [ 143.300350][ T5546] [ 143.611032][ T5546] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 143.627096][ T28] audit: type=1326 audit(1781015508.278:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5551 comm="syz.3.549" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b4e5ce59 code=0x7ffc0000 [ 143.656174][ T5546] syzkaller0: entered promiscuous mode [ 143.668453][ T5546] syzkaller0: entered allmulticast mode [ 143.682574][ T5554] loop2: detected capacity change from 0 to 1024 [ 143.685759][ T28] audit: type=1326 audit(1781015508.278:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5551 comm="syz.3.549" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b4e5ce59 code=0x7ffc0000 [ 143.699977][ T5554] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.716748][ T28] audit: type=1326 audit(1781015508.278:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5551 comm="syz.3.549" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b4e5ce59 code=0x7ffc0000 [ 143.750366][ T28] audit: type=1326 audit(1781015508.278:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5551 comm="syz.3.549" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42b4e5ce59 code=0x7ffc0000 [ 143.770238][ T5554] ext4: Unknown parameter 'hash' [ 143.782042][ T28] audit: type=1326 audit(1781015508.278:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5551 comm="syz.3.549" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b4e5ce59 code=0x7ffc0000 [ 143.810787][ T28] audit: type=1326 audit(1781015508.308:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5551 comm="syz.3.549" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b4e5ce59 code=0x7ffc0000 [ 143.836503][ T28] audit: type=1326 audit(1781015508.318:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5551 comm="syz.3.549" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b4e5ce59 code=0x7ffc0000 [ 143.869033][ T5552] loop3: detected capacity change from 0 to 512 [ 143.880074][ T5552] EXT4-fs: Ignoring removed oldalloc option [ 143.890366][ T35] IPVS: starting estimator thread 0... [ 143.903617][ T5552] EXT4-fs (loop3): filesystem is read-only [ 143.911447][ T5552] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 143.928905][ T5552] EXT4-fs (loop3): filesystem is read-only [ 143.939285][ T5552] EXT4-fs (loop3): orphan cleanup on readonly fs [ 143.952506][ T5552] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.549: bg 0: block 64: padding at end of block bitmap is not set [ 143.968295][ T5552] loop3: lost filesystem error report for type 5 error -117 [ 143.968768][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 143.982581][ C1] EXT4-fs (loop3): initial error at time 1781015508: ext4_validate_block_bitmap:441 [ 143.992027][ C1] EXT4-fs (loop3): last error at time 1781015508: ext4_validate_block_bitmap:441 [ 144.001961][ T5552] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 144.010759][ T5552] loop3: lost filesystem error report for type 5 error -117 [ 144.011063][ T5552] EXT4-fs (loop3): 1 orphan inode deleted [ 144.025181][ T5552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.088556][ T5560] IPVS: using max 2256 ests per chain, 112800 per kthread [ 144.147048][ T5567] loop2: detected capacity change from 0 to 2048 [ 144.181259][ T5567] EXT4-fs: test_dummy_encryption option not supported [ 144.235115][ T5569] loop5: detected capacity change from 0 to 1024 [ 144.260655][ T5569] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.283058][ T5567] capability: warning: `syz.2.554' uses 32-bit capabilities (legacy support in use) [ 144.308273][ T5569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 144.344011][ T5569] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.371026][ T1675] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 112: padding at end of block bitmap is not set [ 144.396183][ T1675] EXT4-fs (loop5): Remounting filesystem read-only [ 144.410069][ T1675] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:5075: inode #15: block 7: len 1: ext4_ext_map_blocks returned -117 [ 144.458609][ T4564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 144.649194][ T5591] FAULT_INJECTION: forcing a failure. [ 144.649194][ T5591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.662350][ T5591] CPU: 0 UID: 0 PID: 5591 Comm: syz.0.560 Not tainted syzkaller #0 PREEMPT(lazy) [ 144.662397][ T5591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 144.662414][ T5591] Call Trace: [ 144.662423][ T5591] [ 144.662434][ T5591] __dump_stack+0x1d/0x30 [ 144.662491][ T5591] dump_stack_lvl+0x95/0xd0 [ 144.662519][ T5591] dump_stack+0x15/0x1b [ 144.662545][ T5591] should_fail_ex+0x263/0x280 [ 144.662643][ T5591] should_fail+0xb/0x20 [ 144.662735][ T5591] should_fail_usercopy+0x1a/0x20 [ 144.662766][ T5591] _copy_to_user+0x20/0xa0 [ 144.662794][ T5591] __se_sys_capget+0x38b/0x440 [ 144.662869][ T5591] __x64_sys_capget+0x31/0x40 [ 144.662910][ T5591] x64_sys_call+0x2bb4/0x3020 [ 144.662943][ T5591] do_syscall_64+0x12c/0x3b0 [ 144.662979][ T5591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.663005][ T5591] RIP: 0033:0x7ff67670ce59 [ 144.663021][ T5591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.663040][ T5591] RSP: 002b:00007ff675167028 EFLAGS: 00000246 ORIG_RAX: 000000000000007d [ 144.663064][ T5591] RAX: ffffffffffffffda RBX: 00007ff676985fa0 RCX: 00007ff67670ce59 [ 144.663083][ T5591] RDX: 0000000000000000 RSI: 0000200000000b40 RDI: 0000200000000b00 [ 144.663099][ T5591] RBP: 00007ff675167090 R08: 0000000000000000 R09: 0000000000000000 [ 144.663131][ T5591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.663148][ T5591] R13: 00007ff676986038 R14: 00007ff676985fa0 R15: 00007ffc13c89fe8 [ 144.663186][ T5591] [ 145.139579][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.689632][ T35] IPVS: starting estimator thread 0... [ 145.788877][ T5605] IPVS: using max 2256 ests per chain, 112800 per kthread [ 145.991013][ T5613] loop2: detected capacity change from 0 to 1024 [ 146.020503][ T5613] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.027750][ T5581] netlink: 60 bytes leftover after parsing attributes in process `syz.1.558'. [ 146.042255][ T5613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 146.055138][ T5613] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.070131][ T30] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 112: padding at end of block bitmap is not set [ 146.087122][ T30] EXT4-fs (loop2): Remounting filesystem read-only [ 146.098375][ T30] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5075: inode #15: block 7: len 1: ext4_ext_map_blocks returned -117 [ 146.124845][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 146.192279][ T5624] ================================================================== [ 146.200423][ T5624] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 146.208173][ T5624] [ 146.210515][ T5624] write to 0xffff8881057b8408 of 8 bytes by task 5617 on cpu 1: [ 146.218158][ T5624] mas_wr_store_entry+0x3405/0x5ad0 [ 146.223384][ T5624] mas_store_prealloc+0x43e/0x690 [ 146.228434][ T5624] commit_merge+0x6a1/0x720 [ 146.232959][ T5624] vma_expand+0x301/0x460 [ 146.237314][ T5624] vma_merge_new_range+0x29c/0x320 [ 146.242451][ T5624] mmap_region+0x10a5/0x20d0 [ 146.247068][ T5624] do_mmap+0x9b2/0xbd0 [ 146.251159][ T5624] vm_mmap_pgoff+0x183/0x2d0 [ 146.255791][ T5624] ksys_mmap_pgoff+0xc1/0x310 [ 146.260486][ T5624] x64_sys_call+0x14df/0x3020 [ 146.265193][ T5624] do_syscall_64+0x12c/0x3b0 [ 146.269815][ T5624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.275728][ T5624] [ 146.278064][ T5624] read to 0xffff8881057b8408 of 8 bytes by task 5624 on cpu 0: [ 146.285630][ T5624] mtree_range_walk+0x1a6/0x490 [ 146.290500][ T5624] mas_walk+0x1cc/0x370 [ 146.294684][ T5624] lock_vma_under_rcu+0xc9/0x210 [ 146.299653][ T5624] do_user_addr_fault+0x232/0x1050 [ 146.304801][ T5624] exc_page_fault+0x62/0xa0 [ 146.309332][ T5624] asm_exc_page_fault+0x26/0x30 [ 146.314202][ T5624] [ 146.316539][ T5624] value changed: 0x00007f5b78b1cfff -> 0x00007f5b78afbfff [ 146.323659][ T5624] [ 146.325990][ T5624] Reported by Kernel Concurrency Sanitizer on: [ 146.332157][ T5624] CPU: 0 UID: 0 PID: 5624 Comm: syz.5.568 Not tainted syzkaller #0 PREEMPT(lazy) [ 146.341376][ T5624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 146.351446][ T5624] ================================================================== [ 149.039278][ T28] kauditd_printk_skb: 267 callbacks suppressed [ 149.039298][ T28] audit: type=1400 audit(1781015513.698:1671): avc: denied { write } for pid=5632 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.075581][ T28] audit: type=1400 audit(1781015513.728:1672): avc: denied { write } for pid=5643 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.792737][ T28] audit: type=1400 audit(1781015514.448:1673): avc: denied { write } for pid=5646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.827849][ T28] audit: type=1400 audit(1781015514.478:1674): avc: denied { write } for pid=5657 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1