last executing test programs: 1m4.506959279s ago: executing program 3 (id=152): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000020, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 1m4.485848449s ago: executing program 3 (id=153): setresgid(0xee00, 0xee01, 0x0) r0 = syz_clone(0x1100400, 0x0, 0xffffffffffffff2b, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000080)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 1m4.229694586s ago: executing program 3 (id=160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42704, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffe6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x3c, 0x2}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) 1m4.152421018s ago: executing program 32 (id=160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42704, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffe6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x3c, 0x2}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) 46.33977343s ago: executing program 33 (id=339): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000600)='./file0\x00', 0x62000bd7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/1000, 0x3e8) openat(r1, &(0x7f0000000143), 0x800, 0x0) 44.21564261s ago: executing program 34 (id=366): perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4000000000000, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) 42.189369068s ago: executing program 6 (id=386): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000300)={0xfffffffc, 0xb, 0x0, 0x86, 0xa, "d38f2d2b3b7505000000000001001c61823a7f"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x258cc74d, 0x4000, 0x0, 0x40, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x4, 0x0, 0x40000003, 0x20b, 0xb, "d206000894f3ffffd51930f9000100"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x6) 41.230288641s ago: executing program 0 (id=394): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000840)=""/196, 0xc4}], 0x1}, 0x10000) 41.168256913s ago: executing program 6 (id=398): mmap$IORING_OFF_CQ_RING(0x7fffffffc000, 0x2dc1, 0x300000f, 0x12, 0xffffffffffffffff, 0x8000000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000040801"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 41.071435425s ago: executing program 6 (id=399): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6111b712000011"], 0xfdef) 40.832834461s ago: executing program 0 (id=402): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00') fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x80000006) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) 40.757738942s ago: executing program 0 (id=404): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000840)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "038d08", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x4, {[@mss={0x2, 0x4, 0xec22}]}}}}}}}}, 0x0) 40.717789913s ago: executing program 35 (id=403): getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0xe}, 0x10000d, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4000090) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x4040010) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000580)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000000)={0xc550, 0x40000000000002, 0x10, 0xb, 0x100005, 0x1}) 40.689059404s ago: executing program 0 (id=406): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]}) 40.555910047s ago: executing program 6 (id=407): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000001100)=ANY=[@ANYBLOB='uni_xlate=1,shortname=winnt,shortname=lower,nfs=nostale_ro,uni_xlate=1,uni_xlate=0,sys_immutable,shortname=mixed,fmask=00000000000000000001577,shortname=mixed,nonumtail=0,utf8=0,shortname=winnt,\x00'], 0x1, 0x2bd, &(0x7f0000001240)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 40.111925088s ago: executing program 6 (id=409): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x824808, &(0x7f0000000180)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@lazytime}, {@grpquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x905}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f00000004c0)="d9ddd531f921f6f919721ee7ed4e", 0x0, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 39.942439912s ago: executing program 0 (id=419): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setreuid(0xffffffffffffffff, 0xee01) setns(r3, 0x24020000) 39.703794637s ago: executing program 0 (id=412): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) 39.701362477s ago: executing program 36 (id=412): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) 39.650611449s ago: executing program 6 (id=414): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xce307, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, @perf_config_ext={0x8, 0x3}, 0x40, 0x2, 0x80, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e001c740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) 39.622206309s ago: executing program 37 (id=414): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xce307, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, @perf_config_ext={0x8, 0x3}, 0x40, 0x2, 0x80, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e001c740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) 38.186610983s ago: executing program 7 (id=428): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000080)='%y', 0x2}], 0x2}, 0x4004) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000280)=""/141}], 0x10000000000000c4) 35.672963893s ago: executing program 7 (id=436): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x6, 0xb, 0x8, 0xf}]}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 35.453305818s ago: executing program 7 (id=439): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r0, &(0x7f00000006c0)={0x11, 0x0, r2, 0x1, 0xb, 0x6, @remote}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[], 0x0) 35.37182044s ago: executing program 7 (id=431): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]}) 34.700737146s ago: executing program 7 (id=438): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0xf7fffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x1]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {@orlov}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 34.279771166s ago: executing program 7 (id=441): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f00000002c0)='J', 0x1, 0x4000, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001100)="fe", 0x1}], 0x1, &(0x7f0000001540)=ANY=[], 0x11d0}}], 0x1, 0x4000045) 34.279524896s ago: executing program 38 (id=441): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f00000002c0)='J', 0x1, 0x4000, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001100)="fe", 0x1}], 0x1, &(0x7f0000001540)=ANY=[], 0x11d0}}], 0x1, 0x4000045) 34.245503967s ago: executing program 3 (id=415): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0xe0) 33.990521803s ago: executing program 3 (id=444): r0 = socket$inet6(0xa, 0x5, 0x0) setuid(0xee00) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) 33.007534116s ago: executing program 3 (id=452): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16], 0x14) 33.007320796s ago: executing program 39 (id=452): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16], 0x14) 22.780816409s ago: executing program 8 (id=580): r0 = fsopen(&(0x7f0000000340)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r2, 0x2, 0x0) getdents(r2, 0x0, 0x58) 22.590574474s ago: executing program 8 (id=584): r0 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0xfffffffa, 0x800, {0xa, 0x0, 0x46, 0xfe, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x104}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x48}}, 0x0) 22.490297226s ago: executing program 8 (id=586): mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x4, 0x0, 0x0) 22.221812582s ago: executing program 8 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x84000, 0x0) 22.028350627s ago: executing program 8 (id=592): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x2a020000) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000040)={[{@release_agent={'release_agent', 0x3d, './file0'}}]}) 21.679707335s ago: executing program 8 (id=599): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0920000000000035090100000000009500000000000000bf080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000005608fdff000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 21.658631626s ago: executing program 40 (id=599): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0920000000000035090100000000009500000000000000bf080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000005608fdff000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 3.273032962s ago: executing program 4 (id=862): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2.973997809s ago: executing program 4 (id=865): r0 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 1.988266142s ago: executing program 4 (id=881): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.638098241s ago: executing program 4 (id=885): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@can={{0x2, 0x0, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "985300"}, 0x10}}, 0xd209f6d814827b17) read(r0, &(0x7f0000002fc0)=""/52, 0x34) 1.355285987s ago: executing program 5 (id=892): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x7ff, 0x1}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x9, 0x2, 0xd20, 0x3, 0xfffffffffffffffe, 0x0, 0x9, 0x2, 0x0, 0x802, 0x2000000009, 0x100, 0x3, 0x4, 0x4a, 0x5, 0x100, 0xd, 0xe1, 0x5, 0x6, 0x2aa, 0x7, 0xc39, 0x8, 0x8, 0x0, 0x2, 0xa51, 0x3ff, 0x80401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x933, 0x101, 0x3, 0x8001, 0x8000000000000400, 0x680, 0x0, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x5, 0x0, 0x14, 0x5, 0x7, 0x8000, 0x8000000000000000, 0x2, 0xfffffffffffffffd, 0x1000000000014, 0x0, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x1, 0x6, 0x1, 0x82c, 0x7ff, 0xffff, 0x1fcc, 0x6, 0x3, 0xd, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x4, 0x8, 0x0, 0x6, 0x26, 0x9, 0x100000002, 0x0, 0x4, 0x0, 0xf, 0x4, 0x9, 0x1001, 0x16d, 0x6, 0x68d, 0xfffffffffff743b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x2400000003, 0x4, 0x8, 0x6, 0x3, 0x8, 0x2000000000000005, 0x0, 0x3, 0x40, 0x80000000, 0x7, 0xe, 0x3]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.226607621s ago: executing program 5 (id=894): socketpair$unix(0x2, 0x2, 0x11, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x50) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20) 1.196883351s ago: executing program 5 (id=895): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) 1.189785732s ago: executing program 2 (id=896): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.094799864s ago: executing program 9 (id=898): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) close(0x3) 841.88253ms ago: executing program 1 (id=899): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x10c0ec, 0x0, 0x0, 0x3, 0x6, 0x2008001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000300)='r:_est/event1 ./file0:0x0', 0x19) 841.47901ms ago: executing program 9 (id=900): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) 783.185191ms ago: executing program 2 (id=901): getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, &(0x7f0000000280)=0x13) unshare(0x2c020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x10000}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 750.144722ms ago: executing program 4 (id=902): openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x14, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0xffffffffffffffa7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 741.169752ms ago: executing program 1 (id=903): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000240)='selinuxfs\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x7ff, 0x1}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 739.995142ms ago: executing program 9 (id=904): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) 556.226996ms ago: executing program 4 (id=905): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x5) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46eaf) 493.287018ms ago: executing program 9 (id=906): socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept4(r0, 0x0, 0x0, 0x80000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000130000001300020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00170000000000000000010c00020400000000000000010800040000000001"], 0xbc}, 0x1, 0x0, 0x0, 0x40004811}, 0x0) 426.214889ms ago: executing program 2 (id=907): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d0000000000000028000000280000000200000000000000000000030000020000000200000000000000010000000000000104"], 0x0, 0x42}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x8000) getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x3300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 263.961744ms ago: executing program 5 (id=908): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 231.513804ms ago: executing program 9 (id=909): ioperm(0x7, 0x81, 0xfffffffffffffffe) r0 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000380)=""/217, 0xd9}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 215.591595ms ago: executing program 5 (id=910): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) io_setup(0x8001, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 212.741105ms ago: executing program 1 (id=911): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804a, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x10, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 34.319479ms ago: executing program 9 (id=912): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 34.193439ms ago: executing program 2 (id=913): add_key(&(0x7f0000000240)='dns_resolver\x00', 0x0, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a30", 0x7f, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x4}, 0x1205, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r0, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004, 0x0, &(0x7f0000001080), 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040800) 0s ago: executing program 5 (id=914): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x102005, 0x0, 0x8, 0x5, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r1, 0x0, 0x0, 0x80800) sendmsg$kcm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): le async write back metadata [ 72.775293][ T5315] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 72.775344][ T5315] EXT4-fs (loop7): I/O error while writing superblock [ 72.808018][ T5315] EXT4-fs error (device loop7): ext4_check_bdev_write_error:235: comm syz.7.431: Error while async write back metadata [ 72.808215][ T5315] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 72.808271][ T5315] EXT4-fs (loop7): I/O error while writing superblock [ 72.808345][ T5315] EXT4-fs error (device loop7): ext4_check_bdev_write_error:235: comm syz.7.431: Error while async write back metadata [ 72.808455][ T5315] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 72.808509][ T5315] EXT4-fs (loop7): I/O error while writing superblock [ 72.808564][ T5315] EXT4-fs error (device loop7): ext4_check_bdev_write_error:235: comm syz.7.431: Error while async write back metadata [ 72.808652][ T5315] EXT4-fs (loop7): I/O error while writing superblock [ 72.808776][ T5315] EXT4-fs error (device loop7): ext4_ext_rm_leaf:2778: inode #16: block 21: comm syz.7.431: IO error syncing itable block [ 72.808874][ T5315] EXT4-fs (loop7): I/O error while writing superblock [ 72.808935][ T5315] EXT4-fs error (device loop7): ext4_check_bdev_write_error:235: comm syz.7.431: Error while async write back metadata [ 72.809619][ T5315] EXT4-fs warning (device loop7): ext4_end_bio:364: I/O error 10 writing to inode 16 starting block 38) [ 72.809691][ T5315] buffer_io_error: 54 callbacks suppressed [ 72.809705][ T5315] Buffer I/O error on device loop7, logical block 38 [ 72.809720][ T5315] Buffer I/O error on device loop7, logical block 39 [ 72.809741][ T5315] Buffer I/O error on device loop7, logical block 40 [ 72.809759][ T5315] Buffer I/O error on device loop7, logical block 41 [ 72.833998][ T5315] EXT4-fs warning (device loop7): ext4_end_bio:364: I/O error 10 writing to inode 16 starting block 42) [ 72.834223][ T5315] EXT4-fs warning (device loop7): ext4_end_bio:364: I/O error 10 writing to inode 16 starting block 45) [ 72.834319][ T5315] Buffer I/O error on device loop7, logical block 45 [ 72.834364][ T5315] Buffer I/O error on device loop7, logical block 42 [ 72.834675][ T5315] EXT4-fs warning (device loop7): ext4_end_bio:364: I/O error 10 writing to inode 16 starting block 48) [ 72.834827][ T5315] Buffer I/O error on device loop7, logical block 48 [ 72.834862][ T5315] Buffer I/O error on device loop7, logical block 49 [ 72.835066][ T5315] EXT4-fs warning (device loop7): ext4_end_bio:364: I/O error 10 writing to inode 16 starting block 52) [ 72.851714][ T5315] Buffer I/O error on device loop7, logical block 52 [ 72.851763][ T5315] Buffer I/O error on device loop7, logical block 53 [ 72.852181][ T5315] EXT4-fs warning (device loop7): ext4_end_bio:364: I/O error 10 writing to inode 16 starting block 56) [ 72.852523][ T5315] EXT4-fs warning (device loop7): ext4_end_bio:364: I/O error 10 writing to inode 16 starting block 60) [ 72.852802][ T5315] EXT4-fs warning (device loop7): ext4_end_bio:364: I/O error 10 writing to inode 16 starting block 64) [ 72.870941][ T5315] EXT4-fs warning (device loop7): ext4_end_bio:364: I/O error 10 writing to inode 16 starting block 22) [ 72.871414][ T5315] EXT4-fs warning (device loop7): ext4_end_bio:364: I/O error 10 writing to inode 16 starting block 46) [ 73.250838][ T5053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.420632][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 73.492009][ T5053] veth0_vlan: entered promiscuous mode [ 73.500354][ T5053] veth1_vlan: entered promiscuous mode [ 73.530199][ T5053] veth0_macvtap: entered promiscuous mode [ 73.550920][ T5053] veth1_macvtap: entered promiscuous mode [ 73.563162][ T5053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.578898][ T5053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.637779][ T3690] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.702332][ T3690] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.724379][ T5387] loop3: detected capacity change from 0 to 2048 [ 73.741078][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 73.741184][ T29] audit: type=1400 audit(1788883226.870:824): avc: denied { write } for pid=5370 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.776566][ T5387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.791496][ T38] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.814015][ T29] audit: type=1400 audit(1788883226.940:825): avc: denied { write } for pid=5386 comm="syz.3.415" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.828761][ T3690] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.859134][ T3695] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.859566][ T3695] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.859605][ T3695] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.889113][ T5387] loop3: detected capacity change from 2048 to 0 [ 73.901584][ T5387] EXT4-fs error (device loop3): __ext4_find_entry:1617: inode #2: comm syz.3.415: reading directory lblock 0 [ 73.901644][ T5392] loop8: detected capacity change from 0 to 1024 [ 73.901648][ T5387] EXT4-fs (loop3): I/O error while writing superblock [ 73.931450][ T3690] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.950964][ T5053] EXT4-fs error (device loop3): ext4_get_inode_loc:5054: inode #2: block 4: comm syz-executor: unable to read itable block [ 73.951508][ T5053] EXT4-fs (loop3): I/O error while writing superblock [ 73.973726][ T5053] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6517: IO failure [ 73.973853][ T5053] EXT4-fs (loop3): I/O error while writing superblock [ 73.973873][ T5053] EXT4-fs error (device loop3): ext4_dirty_inode:6731: inode #2: comm syz-executor: mark_inode_dirty error [ 73.973909][ T5053] EXT4-fs (loop3): I/O error while writing superblock [ 74.044023][ T29] audit: type=1400 audit(1788883227.160:826): avc: denied { write } for pid=5393 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.121912][ T5399] Illegal XDP return value 4294967294 on prog (id 58) dev syz_tun, expect packet loss! [ 74.190495][ T3690] bridge_slave_1: left allmulticast mode [ 74.190614][ T3690] bridge_slave_1: left promiscuous mode [ 74.190906][ T3690] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.220241][ T3690] bridge_slave_0: left allmulticast mode [ 74.220276][ T3690] bridge_slave_0: left promiscuous mode [ 74.220621][ T3690] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.223985][ T5406] FAULT_INJECTION: forcing a failure. [ 74.223985][ T5406] name failslab, interval 1, probability 0, space 0, times 0 [ 74.224140][ T5406] CPU: 0 UID: 0 PID: 5406 Comm: syz.9.447 Not tainted syzkaller #0 PREEMPT(lazy) [ 74.224279][ T5406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.224323][ T5406] Call Trace: [ 74.224344][ T5406] [ 74.224374][ T5406] __dump_stack+0x1d/0x30 [ 74.224478][ T5406] dump_stack_lvl+0x95/0xd0 [ 74.224553][ T5406] dump_stack+0x15/0x1b [ 74.224636][ T5406] should_fail_ex+0x262/0x280 [ 74.224705][ T5406] ? security_file_alloc+0x32/0xf0 [ 74.224852][ T5406] should_failslab+0x8c/0xb0 [ 74.224968][ T5406] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 74.225063][ T5406] ? security_file_alloc+0x32/0xf0 [ 74.225238][ T5406] security_file_alloc+0x32/0xf0 [ 74.225341][ T5406] init_file+0x5b/0x1b0 [ 74.225424][ T5406] alloc_empty_file+0x85/0x1e0 [ 74.225497][ T5406] path_openat+0x50/0x10d0 [ 74.225604][ T5406] do_file_open+0x16c/0x290 [ 74.225737][ T5406] do_sys_openat2+0xa0/0x130 [ 74.225897][ T5406] __x64_sys_openat+0xf2/0x120 [ 74.225985][ T5406] x64_sys_call+0x1f72/0x2550 [ 74.226015][ T5406] do_syscall_64+0x112/0x360 [ 74.226082][ T5406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.226191][ T5406] RIP: 0033:0x7fd47778e98e [ 74.226264][ T5406] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 74.226328][ T5406] RSP: 002b:00007fd476226ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 74.226401][ T5406] RAX: ffffffffffffffda RBX: 00007fd4762276c0 RCX: 00007fd47778e98e [ 74.226451][ T5406] RDX: 0000000000000000 RSI: 00007fd476226f90 RDI: ffffffffffffff9c [ 74.226555][ T5406] RBP: 00007fd47786503b R08: 0000000000000000 R09: 0000000000000000 [ 74.226605][ T5406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.226648][ T5406] R13: 00007fd477a56038 R14: 00007fd477a55fa0 R15: 00007ffdb7916be8 [ 74.226732][ T5406] [ 74.490193][ T5413] FAULT_INJECTION: forcing a failure. [ 74.490193][ T5413] name failslab, interval 1, probability 0, space 0, times 0 [ 74.490233][ T5413] CPU: 0 UID: 0 PID: 5413 Comm: syz.9.448 Not tainted syzkaller #0 PREEMPT(lazy) [ 74.490264][ T5413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.490277][ T5413] Call Trace: [ 74.490284][ T5413] [ 74.490292][ T5413] __dump_stack+0x1d/0x30 [ 74.490347][ T5413] dump_stack_lvl+0x95/0xd0 [ 74.490422][ T5413] dump_stack+0x15/0x1b [ 74.490453][ T5413] should_fail_ex+0x262/0x280 [ 74.490524][ T5413] ? security_inode_alloc+0x37/0x100 [ 74.490593][ T5413] should_failslab+0x8c/0xb0 [ 74.490734][ T5413] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 74.490956][ T5413] ? security_inode_alloc+0x37/0x100 [ 74.491066][ T5413] security_inode_alloc+0x37/0x100 [ 74.491158][ T5413] inode_init_always_gfp+0x495/0x4e0 [ 74.491233][ T5413] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 74.491330][ T5413] alloc_inode+0x58/0x170 [ 74.491405][ T5413] new_inode+0x1d/0xe0 [ 74.491481][ T5413] hugetlbfs_fill_super+0x2a1/0x400 [ 74.491587][ T5413] ? __pfx_hugetlbfs_fill_super+0x10/0x10 [ 74.491665][ T5413] get_tree_nodev+0x83/0x100 [ 74.491792][ T5413] hugetlbfs_get_tree+0x1c3/0x1f0 [ 74.491896][ T5413] vfs_get_tree+0x57/0x1d0 [ 74.491995][ T5413] do_new_mount+0x288/0x8d0 [ 74.492114][ T5413] ? security_capable+0x7b/0x90 [ 74.492218][ T5413] path_mount+0x4ad/0xb90 [ 74.492408][ T5413] __se_sys_mount+0x28c/0x2e0 [ 74.492484][ T5413] __x64_sys_mount+0x67/0x80 [ 74.492556][ T5413] x64_sys_call+0xc3b/0x2550 [ 74.492725][ T5413] do_syscall_64+0x112/0x360 [ 74.492844][ T5413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.492923][ T5413] RIP: 0033:0x7fd4777ce159 [ 74.492977][ T5413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.493072][ T5413] RSP: 002b:00007fd476227028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 74.493147][ T5413] RAX: ffffffffffffffda RBX: 00007fd477a55fa0 RCX: 00007fd4777ce159 [ 74.493193][ T5413] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000 [ 74.493246][ T5413] RBP: 00007fd47786503b R08: 0000000000000000 R09: 0000000000000000 [ 74.493292][ T5413] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 74.493350][ T5413] R13: 00007fd477a56038 R14: 00007fd477a55fa0 R15: 00007ffdb7916be8 [ 74.493498][ T5413] [ 74.742169][ T29] audit: type=1400 audit(1788883227.870:827): avc: denied { write } for pid=5402 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.799907][ T3690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.812866][ T3690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.822715][ T3690] bond0 (unregistering): Released all slaves [ 74.835100][ T29] audit: type=1400 audit(1788883227.960:828): avc: denied { write } for pid=5427 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.840897][ T5053] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.869338][ T5053] EXT4-fs (loop3): I/O error while writing superblock [ 74.968433][ T3690] hsr_slave_0: left promiscuous mode [ 74.974574][ T3690] hsr_slave_1: left promiscuous mode [ 74.975833][ T3690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.975884][ T3690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.981017][ T3690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.981062][ T3690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.010915][ T3690] veth1_macvtap: left promiscuous mode [ 75.010975][ T3690] veth0_macvtap: left promiscuous mode [ 75.011099][ T3690] veth1_vlan: left promiscuous mode [ 75.011165][ T3690] veth0_vlan: left promiscuous mode [ 75.034232][ T5439] FAULT_INJECTION: forcing a failure. [ 75.034232][ T5439] name failslab, interval 1, probability 0, space 0, times 0 [ 75.034271][ T5439] CPU: 1 UID: 0 PID: 5439 Comm: syz.8.454 Not tainted syzkaller #0 PREEMPT(lazy) [ 75.034307][ T5439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.034325][ T5439] Call Trace: [ 75.034334][ T5439] [ 75.034345][ T5439] __dump_stack+0x1d/0x30 [ 75.034379][ T5439] dump_stack_lvl+0x95/0xd0 [ 75.034455][ T5439] dump_stack+0x15/0x1b [ 75.034599][ T5439] should_fail_ex+0x262/0x280 [ 75.034649][ T5439] ? fcntl_setlk+0x4c/0x910 [ 75.034703][ T5439] should_failslab+0x8c/0xb0 [ 75.034821][ T5439] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 75.034861][ T5439] ? fcntl_setlk+0x4c/0x910 [ 75.034944][ T5439] fcntl_setlk+0x4c/0x910 [ 75.034974][ T5439] ? should_fail_ex+0xdb/0x280 [ 75.035000][ T5439] do_fcntl+0x69c/0xf80 [ 75.035096][ T5439] __se_sys_fcntl+0xb1/0x120 [ 75.035134][ T5439] __x64_sys_fcntl+0x43/0x50 [ 75.035208][ T5439] x64_sys_call+0x1a43/0x2550 [ 75.035242][ T5439] do_syscall_64+0x112/0x360 [ 75.035282][ T5439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.035306][ T5439] RIP: 0033:0x7fc1863ce159 [ 75.035323][ T5439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.035342][ T5439] RSP: 002b:00007fc184e27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 75.035413][ T5439] RAX: ffffffffffffffda RBX: 00007fc186655fa0 RCX: 00007fc1863ce159 [ 75.035429][ T5439] RDX: 0000200000000200 RSI: 0000000000000025 RDI: 0000000000000003 [ 75.035446][ T5439] RBP: 00007fc18646503b R08: 0000000000000000 R09: 0000000000000000 [ 75.035538][ T5439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.035555][ T5439] R13: 00007fc186656038 R14: 00007fc186655fa0 R15: 00007ffc62e64d78 [ 75.035594][ T5439] [ 75.274565][ T29] audit: type=1400 audit(1788883228.400:829): avc: denied { write } for pid=5435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.341226][ T29] audit: type=1400 audit(1788883228.470:830): avc: denied { write } for pid=5456 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.402862][ T3690] team0 (unregistering): Port device team_slave_1 removed [ 75.413145][ T3690] team0 (unregistering): Port device team_slave_0 removed [ 75.537093][ T29] audit: type=1400 audit(1788883228.650:831): avc: denied { read write } for pid=5468 comm="syz.4.457" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 75.560927][ T29] audit: type=1400 audit(1788883228.660:832): avc: denied { open } for pid=5468 comm="syz.4.457" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 75.589790][ T3377] logitech-hidpp-device 0003:046D:C082.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 75.693197][ T5479] fido_id[5479]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 75.720890][ T29] audit: type=1400 audit(1788883228.850:833): avc: denied { allowed } for pid=5487 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 75.979796][ T3690] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.072573][ T5394] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.072622][ T5394] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.072721][ T5394] bridge_slave_0: entered allmulticast mode [ 76.073279][ T5394] bridge_slave_0: entered promiscuous mode [ 76.113002][ T5394] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.113046][ T5394] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.113138][ T5394] bridge_slave_1: entered allmulticast mode [ 76.113884][ T5394] bridge_slave_1: entered promiscuous mode [ 76.212757][ T5394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.225759][ T5394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.236070][ T3376] Process accounting resumed [ 76.290976][ T5441] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.291027][ T5441] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.291197][ T5441] bridge_slave_0: entered allmulticast mode [ 76.291713][ T5441] bridge_slave_0: entered promiscuous mode [ 76.296353][ T5394] team0: Port device team_slave_0 added [ 76.298707][ T5394] team0: Port device team_slave_1 added [ 76.347868][ T5441] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.347927][ T5441] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.348018][ T5441] bridge_slave_1: entered allmulticast mode [ 76.348534][ T5441] bridge_slave_1: entered promiscuous mode [ 76.381613][ T3690] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.402803][ T5394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.402826][ T5394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.402863][ T5394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.446054][ T5441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.455788][ T5441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.486600][ T5394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.486626][ T5394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.486670][ T5394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.491872][ T5441] team0: Port device team_slave_0 added [ 76.497079][ T5441] team0: Port device team_slave_1 added [ 76.551287][ T3690] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.578279][ T5441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.578303][ T5441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.578341][ T5441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.628787][ T5441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.628832][ T5441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.628903][ T5441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.694358][ T3690] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.710644][ T5394] hsr_slave_0: entered promiscuous mode [ 76.711171][ T5394] hsr_slave_1: entered promiscuous mode [ 76.722930][ T5394] debugfs: 'hsr0' already exists in 'hsr' [ 76.722952][ T5394] Cannot create hsr debugfs directory [ 76.753699][ T5441] hsr_slave_0: entered promiscuous mode [ 76.761388][ T5441] hsr_slave_1: entered promiscuous mode [ 76.761776][ T5441] debugfs: 'hsr0' already exists in 'hsr' [ 76.761799][ T5441] Cannot create hsr debugfs directory [ 76.803095][ T3688] Bluetooth: hci0: Frame reassembly failed (-84) [ 76.854860][ T3690] bridge_slave_1: left allmulticast mode [ 76.854893][ T3690] bridge_slave_1: left promiscuous mode [ 76.854988][ T3690] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.876102][ T3690] bridge_slave_0: left allmulticast mode [ 76.876179][ T3690] bridge_slave_0: left promiscuous mode [ 76.876339][ T3690] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.946883][ T3690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.957334][ T3690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.966997][ T3690] bond0 (unregistering): Released all slaves [ 77.008925][ T3690] hsr_slave_0: left promiscuous mode [ 77.014819][ T3690] hsr_slave_1: left promiscuous mode [ 77.016025][ T3690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.016077][ T3690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.021070][ T3690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.021117][ T3690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.035304][ T3690] veth1_macvtap: left promiscuous mode [ 77.035506][ T3690] veth0_macvtap: left promiscuous mode [ 77.035650][ T3690] veth1_vlan: left promiscuous mode [ 77.035834][ T3690] veth0_vlan: left promiscuous mode [ 77.132290][ T3690] team0 (unregistering): Port device team_slave_1 removed [ 77.140674][ T3690] team0 (unregistering): Port device team_slave_0 removed [ 77.205303][ T5394] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.283481][ T5394] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.342482][ T5394] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.412935][ T5394] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.420611][ T4993] buffer_io_error: 12 callbacks suppressed [ 77.420674][ T4993] Buffer I/O error on dev loop0, logical block 12, lost sync page write [ 77.718456][ T5421] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 77.724905][ T5394] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.735185][ T5394] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.736177][ T5441] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.752858][ T5441] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.754735][ T5441] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.778011][ T5441] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.786326][ T5394] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.796989][ T5394] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.799363][ T5441] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.812804][ T5441] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.815506][ T5441] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.830116][ T5441] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.832353][ T5394] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.843628][ T5394] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.848653][ T5394] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.860750][ T5394] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.922654][ T5394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.936857][ T5394] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.944058][ T5441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.953549][ T3695] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.953601][ T3695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.971033][ T3690] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.971095][ T3690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.974470][ T5441] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.994541][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.994620][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.022127][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.022179][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.081930][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 78.231515][ T5441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.267757][ T5394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.301064][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 78.392790][ T5441] veth0_vlan: entered promiscuous mode [ 78.404331][ T5441] veth1_vlan: entered promiscuous mode [ 78.426578][ T5394] veth0_vlan: entered promiscuous mode [ 78.435220][ T5394] veth1_vlan: entered promiscuous mode [ 78.447758][ T5441] veth0_macvtap: entered promiscuous mode [ 78.458046][ T5441] veth1_macvtap: entered promiscuous mode [ 78.469966][ T5394] veth0_macvtap: entered promiscuous mode [ 78.477456][ T5394] veth1_macvtap: entered promiscuous mode [ 78.490668][ T5441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.507797][ T5394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.513027][ T5441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.528556][ T5394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.529417][ T3695] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.530252][ T3695] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.530550][ T3695] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.532066][ T3695] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.567994][ T3021] 8021q: adding VLAN 0 to HW filter on device eth17 [ 78.619704][ T3695] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.620146][ T3695] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.620859][ T3695] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.622114][ T3695] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.752939][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 78.752969][ T29] audit: type=1400 audit(1788883231.880:850): avc: denied { write } for pid=5648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.804085][ T29] audit: type=1400 audit(1788883231.930:851): avc: denied { write } for pid=5673 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.859115][ T4037] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.011453][ T29] audit: type=1400 audit(1788883232.140:852): avc: denied { write } for pid=5677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.094587][ T29] audit: type=1400 audit(1788883232.220:853): avc: denied { write } for pid=5693 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.194832][ T5702] netlink: 'syz.8.476': attribute type 4 has an invalid length. [ 79.208222][ T5702] netlink: 'syz.8.476': attribute type 4 has an invalid length. [ 79.262637][ T29] audit: type=1400 audit(1788883232.390:854): avc: denied { write } for pid=5697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.327148][ T29] audit: type=1400 audit(1788883232.450:855): avc: denied { write } for pid=5712 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.484089][ T29] audit: type=1400 audit(1788883232.610:856): avc: denied { write } for pid=5717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.547600][ T29] audit: type=1400 audit(1788883232.670:857): avc: denied { create } for pid=5731 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.559582][ T29] audit: type=1400 audit(1788883232.680:858): avc: denied { write } for pid=5730 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.590681][ T29] audit: type=1400 audit(1788883232.720:859): avc: denied { setopt } for pid=5731 comm="syz.1.482" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.644280][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 79.867187][ T3377] logitech-hidpp-device 0003:046D:C082.0002: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 79.977400][ T5764] fido_id[5764]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 80.050735][ T5787] FAULT_INJECTION: forcing a failure. [ 80.050735][ T5787] name failslab, interval 1, probability 0, space 0, times 0 [ 80.050810][ T5787] CPU: 1 UID: 0 PID: 5787 Comm: syz.1.496 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.050837][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.050924][ T5787] Call Trace: [ 80.050933][ T5787] [ 80.050944][ T5787] __dump_stack+0x1d/0x30 [ 80.050979][ T5787] dump_stack_lvl+0x95/0xd0 [ 80.051010][ T5787] dump_stack+0x15/0x1b [ 80.051095][ T5787] should_fail_ex+0x262/0x280 [ 80.051127][ T5787] should_failslab+0x8c/0xb0 [ 80.051187][ T5787] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 80.051230][ T5787] ? __d_alloc+0x34/0x320 [ 80.051256][ T5787] ? __d_alloc+0x34/0x320 [ 80.051311][ T5787] __d_alloc+0x34/0x320 [ 80.051343][ T5787] ? d_alloc_pseudo+0x13/0x80 [ 80.051407][ T5787] d_alloc_pseudo+0x1e/0x80 [ 80.051432][ T5787] alloc_path_pseudo+0xa4/0x140 [ 80.051482][ T5787] alloc_file_pseudo+0x55/0x120 [ 80.051515][ T5787] __shmem_file_setup+0x226/0x260 [ 80.051631][ T5787] shmem_file_setup+0x3b/0x50 [ 80.051660][ T5787] memfd_alloc_file+0x4e/0x300 [ 80.051706][ T5787] __se_sys_memfd_create+0x2e1/0x3b0 [ 80.051751][ T5787] __x64_sys_memfd_create+0x31/0x40 [ 80.051849][ T5787] x64_sys_call+0x1955/0x2550 [ 80.051880][ T5787] do_syscall_64+0x112/0x360 [ 80.051919][ T5787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.051986][ T5787] RIP: 0033:0x7f114558e159 [ 80.052003][ T5787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.052022][ T5787] RSP: 002b:00007f1143fe6d58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 80.052043][ T5787] RAX: ffffffffffffffda RBX: 000000000000103c RCX: 00007f114558e159 [ 80.052058][ T5787] RDX: 00007f1143fe6ddc RSI: 0000000000000000 RDI: 00007f114562521b [ 80.052086][ T5787] RBP: 0000200000001040 R08: 00000000ffffffff R09: 0000000000000000 [ 80.052105][ T5787] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000000 [ 80.052122][ T5787] R13: 00007f1143fe6ddc R14: 00007f1143fe6de0 R15: 00007ffd127b0b18 [ 80.052150][ T5787] [ 80.090637][ T5783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.494'. [ 80.234884][ T5783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.494'. [ 80.452259][ T3377] logitech-hidpp-device 0003:046D:C082.0003: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 80.490700][ T5819] fido_id[5819]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 80.555327][ T5823] netlink: 'syz.8.505': attribute type 13 has an invalid length. [ 80.584330][ T5832] FAULT_INJECTION: forcing a failure. [ 80.584330][ T5832] name failslab, interval 1, probability 0, space 0, times 0 [ 80.584375][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: syz.4.507 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.584518][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.584576][ T5832] Call Trace: [ 80.584593][ T5832] [ 80.584627][ T5832] __dump_stack+0x1d/0x30 [ 80.584722][ T5832] dump_stack_lvl+0x95/0xd0 [ 80.584799][ T5832] dump_stack+0x15/0x1b [ 80.584875][ T5832] should_fail_ex+0x262/0x280 [ 80.584958][ T5832] ? io_wq_create+0x4b/0x4b0 [ 80.585060][ T5832] should_failslab+0x8c/0xb0 [ 80.585165][ T5832] __kmalloc_cache_noprof+0x7a/0x400 [ 80.585292][ T5832] ? io_uring_alloc_task_context+0xdd/0x350 [ 80.585416][ T5832] ? io_wq_create+0x4b/0x4b0 [ 80.585519][ T5832] io_wq_create+0x4b/0x4b0 [ 80.585588][ T5832] io_uring_alloc_task_context+0x17b/0x350 [ 80.585655][ T5832] __io_uring_add_tctx_node+0x2b9/0x3b0 [ 80.585753][ T5832] io_uring_create+0x3e1/0x4f0 [ 80.585870][ T5832] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 80.586010][ T5832] __x64_sys_io_uring_setup+0x31/0x40 [ 80.586154][ T5832] x64_sys_call+0x1fbf/0x2550 [ 80.586315][ T5832] do_syscall_64+0x112/0x360 [ 80.586422][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.586504][ T5832] RIP: 0033:0x7f6aa679e159 [ 80.586634][ T5832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.586697][ T5832] RSP: 002b:00007f6aa51f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 80.586771][ T5832] RAX: ffffffffffffffda RBX: 00007f6aa6a25fa0 RCX: 00007f6aa679e159 [ 80.586823][ T5832] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007fc0 [ 80.586917][ T5832] RBP: 00007f6aa683503b R08: 0000000000000000 R09: 0000000000000000 [ 80.586962][ T5832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.587006][ T5832] R13: 00007f6aa6a26038 R14: 00007f6aa6a25fa0 R15: 00007ffe0a05f898 [ 80.587078][ T5832] [ 80.888178][ T5846] FAULT_INJECTION: forcing a failure. [ 80.888178][ T5846] name failslab, interval 1, probability 0, space 0, times 0 [ 80.888252][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: syz.4.511 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.888298][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.888311][ T5846] Call Trace: [ 80.888385][ T5846] [ 80.888403][ T5846] __dump_stack+0x1d/0x30 [ 80.888430][ T5846] dump_stack_lvl+0x95/0xd0 [ 80.888461][ T5846] dump_stack+0x15/0x1b [ 80.888490][ T5846] should_fail_ex+0x262/0x280 [ 80.888521][ T5846] should_failslab+0x8c/0xb0 [ 80.888641][ T5846] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 80.888684][ T5846] ? __d_alloc+0x34/0x320 [ 80.888711][ T5846] ? __d_alloc+0x34/0x320 [ 80.888773][ T5846] __d_alloc+0x34/0x320 [ 80.888800][ T5846] ? d_alloc_pseudo+0x13/0x80 [ 80.888834][ T5846] d_alloc_pseudo+0x1e/0x80 [ 80.888866][ T5846] alloc_path_pseudo+0xa4/0x140 [ 80.888972][ T5846] alloc_file_pseudo+0x55/0x120 [ 80.889003][ T5846] __shmem_file_setup+0x226/0x260 [ 80.889043][ T5846] shmem_file_setup+0x3b/0x50 [ 80.889076][ T5846] memfd_alloc_file+0x4e/0x300 [ 80.889167][ T5846] __se_sys_memfd_create+0x2e1/0x3b0 [ 80.889204][ T5846] __x64_sys_memfd_create+0x31/0x40 [ 80.889236][ T5846] x64_sys_call+0x1955/0x2550 [ 80.889344][ T5846] do_syscall_64+0x112/0x360 [ 80.889390][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.889453][ T5846] RIP: 0033:0x7f6aa679e159 [ 80.889531][ T5846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.889557][ T5846] RSP: 002b:00007f6aa51f6d58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 80.889579][ T5846] RAX: ffffffffffffffda RBX: 000000000000103c RCX: 00007f6aa679e159 [ 80.889593][ T5846] RDX: 00007f6aa51f6ddc RSI: 0000000000000000 RDI: 00007f6aa683521b [ 80.889622][ T5846] RBP: 0000200000001040 R08: 00000000ffffffff R09: 0000000000000000 [ 80.889635][ T5846] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000000 [ 80.889651][ T5846] R13: 00007f6aa51f6ddc R14: 00007f6aa51f6de0 R15: 00007ffe0a05f898 [ 80.889672][ T5846] [ 81.154273][ T5848] FAULT_INJECTION: forcing a failure. [ 81.154273][ T5848] name failslab, interval 1, probability 0, space 0, times 0 [ 81.154354][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: syz.9.512 Not tainted syzkaller #0 PREEMPT(lazy) [ 81.154481][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.154533][ T5848] Call Trace: [ 81.154564][ T5848] [ 81.154620][ T5848] __dump_stack+0x1d/0x30 [ 81.154708][ T5848] dump_stack_lvl+0x95/0xd0 [ 81.154830][ T5848] dump_stack+0x15/0x1b [ 81.154918][ T5848] should_fail_ex+0x262/0x280 [ 81.154996][ T5848] should_failslab+0x8c/0xb0 [ 81.155101][ T5848] __kmalloc_node_noprof+0xdb/0x500 [ 81.155229][ T5848] ? crypto_create_tfm_node+0x5b/0x230 [ 81.155296][ T5848] ? crypto_create_tfm_node+0x5b/0x230 [ 81.155379][ T5848] crypto_create_tfm_node+0x5b/0x230 [ 81.155448][ T5848] ? crypto_alg_mod_lookup+0x454/0x490 [ 81.155666][ T5848] crypto_alloc_tfm_node+0xb8/0x280 [ 81.155821][ T5848] crypto_alloc_aead+0x2d/0x40 [ 81.155925][ T5848] esp6_init_state+0x3ec/0xa00 [ 81.156003][ T5848] ? should_failslab+0x8c/0xb0 [ 81.156112][ T5848] __xfrm_init_state+0x6b9/0xb40 [ 81.156228][ T5848] xfrm_init_state+0x1e/0x80 [ 81.156348][ T5848] pfkey_add+0xfc5/0x12b0 [ 81.156473][ T5848] pfkey_sendmsg+0x839/0x970 [ 81.156657][ T5848] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 81.156810][ T5848] ____sys_sendmsg+0x532/0x580 [ 81.156872][ T5848] ___sys_sendmsg+0x195/0x1e0 [ 81.156989][ T5848] ? hrtimer_start_range_ns_common+0x55c/0x860 [ 81.157195][ T5848] __x64_sys_sendmsg+0xd4/0x160 [ 81.157344][ T5848] x64_sys_call+0x22ab/0x2550 [ 81.157460][ T5848] do_syscall_64+0x112/0x360 [ 81.157570][ T5848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.157654][ T5848] RIP: 0033:0x7fd4777ce159 [ 81.157702][ T5848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.157782][ T5848] RSP: 002b:00007fd476227028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.157855][ T5848] RAX: ffffffffffffffda RBX: 00007fd477a55fa0 RCX: 00007fd4777ce159 [ 81.157948][ T5848] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 81.157992][ T5848] RBP: 00007fd47786503b R08: 0000000000000000 R09: 0000000000000000 [ 81.158043][ T5848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.158080][ T5848] R13: 00007fd477a56038 R14: 00007fd477a55fa0 R15: 00007ffdb7916be8 [ 81.158154][ T5848] [ 81.188036][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 81.413455][ T5861] loop4: detected capacity change from 0 to 1024 [ 81.530945][ T5876] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 81.552217][ T11] logitech-hidpp-device 0003:046D:C082.0004: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 81.628141][ T5890] loop2: detected capacity change from 0 to 1024 [ 81.637462][ T5883] fido_id[5883]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 81.665253][ T5890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.741288][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 81.784715][ T5888] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 81.799921][ T5888] EXT4-fs (loop2): Remounting filesystem read-only [ 81.799998][ T5888] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 18, error -30) [ 81.822921][ T5907] netlink: 'syz.1.526': attribute type 13 has an invalid length. [ 81.921045][ T5394] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.186929][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.534'. [ 82.216370][ T24] logitech-hidpp-device 0003:046D:C082.0005: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 82.225244][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.534'. [ 82.254335][ T5936] fido_id[5936]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 82.459640][ T4993] Buffer I/O error on dev loop0, logical block 12, lost sync page write [ 82.566868][ T3021] 8021q: adding VLAN 0 to HW filter on device eth18 [ 82.888413][ T5947] loop4: detected capacity change from 0 to 512 [ 82.955771][ T3021] 8021q: adding VLAN 0 to HW filter on device eth19 [ 83.053926][ T5979] loop9: detected capacity change from 0 to 1024 [ 83.085521][ T5979] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.089614][ T5947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.089982][ T5947] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.199486][ T5978] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 83.200055][ T5978] EXT4-fs (loop9): Remounting filesystem read-only [ 83.200200][ T5978] EXT4-fs (loop9): error restoring inline_data for inode -- potential data loss! (inode 18, error -30) [ 83.336634][ T5041] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.411662][ T3021] 8021q: adding VLAN 0 to HW filter on device eth20 [ 83.564538][ T11] logitech-hidpp-device 0003:046D:C082.0006: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 83.603498][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.658089][ T6023] fido_id[6023]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.670183][ T6027] FAULT_INJECTION: forcing a failure. [ 83.670183][ T6027] name failslab, interval 1, probability 0, space 0, times 0 [ 83.670302][ T6027] CPU: 0 UID: 0 PID: 6027 Comm: syz.1.552 Not tainted syzkaller #0 PREEMPT(lazy) [ 83.670456][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.670501][ T6027] Call Trace: [ 83.670531][ T6027] [ 83.670555][ T6027] __dump_stack+0x1d/0x30 [ 83.670748][ T6027] dump_stack_lvl+0x95/0xd0 [ 83.670831][ T6027] dump_stack+0x15/0x1b [ 83.670908][ T6027] should_fail_ex+0x262/0x280 [ 83.670984][ T6027] should_failslab+0x8c/0xb0 [ 83.671162][ T6027] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 83.671288][ T6027] ? alloc_inode+0x9a/0x170 [ 83.671347][ T6027] ? alloc_inode+0x9a/0x170 [ 83.671455][ T6027] alloc_inode+0x9a/0x170 [ 83.671474][ T6027] path_from_stashed+0xec/0x330 [ 83.671557][ T6027] ? __pfx_proc_ns_get_link+0x10/0x10 [ 83.671697][ T6027] ns_get_path+0x62/0x80 [ 83.671834][ T6027] proc_ns_get_link+0xdd/0x1c0 [ 83.671952][ T6027] pick_link+0x4b1/0x8e0 [ 83.672038][ T6027] step_into_slowpath+0x36a/0x4c0 [ 83.672175][ T6027] path_openat+0x665/0x10d0 [ 83.672354][ T6027] do_file_open+0x16c/0x290 [ 83.672484][ T6027] do_sys_openat2+0xa0/0x130 [ 83.672515][ T6027] __x64_sys_openat+0xf2/0x120 [ 83.672565][ T6027] x64_sys_call+0x1f72/0x2550 [ 83.672601][ T6027] do_syscall_64+0x112/0x360 [ 83.672819][ T6027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.672887][ T6027] RIP: 0033:0x7f114554e98e [ 83.672948][ T6027] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 83.673012][ T6027] RSP: 002b:00007f1143fe6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 83.673084][ T6027] RAX: ffffffffffffffda RBX: 00007f1143fe76c0 RCX: 00007f114554e98e [ 83.673219][ T6027] RDX: 0000000000000000 RSI: 00007f1143fe6f90 RDI: ffffffffffffff9c [ 83.673263][ T6027] RBP: 00007f114562503b R08: 0000000000000000 R09: 0000000000000000 [ 83.673317][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.673361][ T6027] R13: 00007f1145816038 R14: 00007f1145815fa0 R15: 00007ffd127b0b18 [ 83.673482][ T6027] [ 83.913234][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 83.913262][ T29] audit: type=1400 audit(1788883237.040:889): avc: denied { write } for pid=6031 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.039429][ T6036] loop1: detected capacity change from 0 to 512 [ 84.043512][ T6036] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.072538][ T6036] EXT4-fs (loop1): 1 truncate cleaned up [ 84.080288][ T6036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.106410][ T3021] 8021q: adding VLAN 0 to HW filter on device eth21 [ 84.114259][ T29] audit: type=1400 audit(1788883237.230:890): avc: denied { create } for pid=6043 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 84.164629][ T29] audit: type=1400 audit(1788883237.290:891): avc: denied { ioctl } for pid=6043 comm="syz.2.559" path="socket:[14557]" dev="sockfs" ino=14557 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 84.180297][ T29] audit: type=1400 audit(1788883237.300:892): avc: denied { write } for pid=6043 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 84.215023][ T29] audit: type=1400 audit(1788883237.340:893): avc: denied { write } for pid=6035 comm="syz.1.555" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.246796][ T29] audit: type=1400 audit(1788883237.370:894): avc: denied { write } for pid=6035 comm="syz.1.555" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.280283][ T6036] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 13: comm syz.1.555: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 84.340855][ T6055] loop4: detected capacity change from 0 to 256 [ 84.383619][ T5441] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.480588][ T6070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.480776][ T6070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.520262][ T6067] uprobe: syz.1.565:6067 failed to unregister, leaking uprobe [ 84.533561][ T29] audit: type=1400 audit(1788883237.660:895): avc: denied { write } for pid=6050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.641734][ T29] audit: type=1400 audit(1788883237.770:896): avc: denied { write } for pid=6076 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.675105][ T6082] FAULT_INJECTION: forcing a failure. [ 84.675105][ T6082] name failslab, interval 1, probability 0, space 0, times 0 [ 84.675188][ T6082] CPU: 0 UID: 0 PID: 6082 Comm: syz.1.568 Not tainted syzkaller #0 PREEMPT(lazy) [ 84.675224][ T6082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.675244][ T6082] Call Trace: [ 84.675253][ T6082] [ 84.675264][ T6082] __dump_stack+0x1d/0x30 [ 84.675309][ T6082] dump_stack_lvl+0x95/0xd0 [ 84.675341][ T6082] dump_stack+0x15/0x1b [ 84.675371][ T6082] should_fail_ex+0x262/0x280 [ 84.675411][ T6082] ? io_wq_create+0x4b/0x4b0 [ 84.675457][ T6082] should_failslab+0x8c/0xb0 [ 84.675501][ T6082] __kmalloc_cache_noprof+0x7a/0x400 [ 84.675593][ T6082] ? io_uring_alloc_task_context+0xdd/0x350 [ 84.675639][ T6082] ? io_wq_create+0x4b/0x4b0 [ 84.675681][ T6082] io_wq_create+0x4b/0x4b0 [ 84.675736][ T6082] io_uring_alloc_task_context+0x17b/0x350 [ 84.675787][ T6082] __io_uring_add_tctx_node+0x2b9/0x3b0 [ 84.675827][ T6082] io_uring_create+0x3e1/0x4f0 [ 84.676000][ T6082] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 84.676047][ T6082] __x64_sys_io_uring_setup+0x31/0x40 [ 84.676086][ T6082] x64_sys_call+0x1fbf/0x2550 [ 84.676185][ T6082] do_syscall_64+0x112/0x360 [ 84.676243][ T6082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.676277][ T6082] RIP: 0033:0x7f114558e159 [ 84.676300][ T6082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.676327][ T6082] RSP: 002b:00007f1143fe7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 84.676411][ T6082] RAX: ffffffffffffffda RBX: 00007f1145815fa0 RCX: 00007f114558e159 [ 84.676433][ T6082] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007fc0 [ 84.676453][ T6082] RBP: 00007f114562503b R08: 0000000000000000 R09: 0000000000000000 [ 84.676473][ T6082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.676492][ T6082] R13: 00007f1145816038 R14: 00007f1145815fa0 R15: 00007ffd127b0b18 [ 84.676588][ T6082] [ 84.892245][ T6065] loop2: detected capacity change from 0 to 512 [ 84.903769][ T3021] 8021q: adding VLAN 0 to HW filter on device eth22 [ 85.090519][ T6065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.091842][ T6065] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.142249][ T6106] loop9: detected capacity change from 0 to 512 [ 85.142687][ T6106] EXT4-fs: Ignoring removed bh option [ 85.177775][ T6106] EXT4-fs error (device loop9): __ext4_iget:5592: inode #15: block 1803188595: comm syz.9.579: invalid block [ 85.177819][ T6106] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.178031][ T6106] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.579: couldn't read orphan inode 15 (err -117) [ 85.178067][ T6106] loop9: lost filesystem error report for type 5 error -117 [ 85.212901][ T6106] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.257350][ T29] audit: type=1400 audit(1788883238.380:897): avc: denied { read } for pid=6114 comm="syz.8.580" name="/" dev="configfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.257446][ T29] audit: type=1400 audit(1788883238.380:898): avc: denied { read open } for pid=6114 comm="syz.8.580" path="/" dev="configfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.353560][ T5041] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.459351][ T6130] FAULT_INJECTION: forcing a failure. [ 85.459351][ T6130] name failslab, interval 1, probability 0, space 0, times 0 [ 85.459407][ T6130] CPU: 0 UID: 0 PID: 6130 Comm: syz.4.585 Not tainted syzkaller #0 PREEMPT(lazy) [ 85.459481][ T6130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.459610][ T6130] Call Trace: [ 85.459640][ T6130] [ 85.459671][ T6130] __dump_stack+0x1d/0x30 [ 85.459771][ T6130] dump_stack_lvl+0x95/0xd0 [ 85.459862][ T6130] dump_stack+0x15/0x1b [ 85.459935][ T6130] should_fail_ex+0x262/0x280 [ 85.460091][ T6130] ? __anon_vma_prepare+0x70/0x2f0 [ 85.460230][ T6130] should_failslab+0x8c/0xb0 [ 85.460414][ T6130] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 85.460529][ T6130] ? __anon_vma_prepare+0x70/0x2f0 [ 85.460643][ T6130] ? _raw_spin_lock+0x53/0xa0 [ 85.460768][ T6130] __anon_vma_prepare+0x70/0x2f0 [ 85.460921][ T6130] handle_mm_fault+0x31b6/0x3bb0 [ 85.461043][ T6130] ? vma_is_secretmem+0x16/0x30 [ 85.461136][ T6130] __get_user_pages+0x12e9/0x1eb0 [ 85.461324][ T6130] get_user_pages_remote+0x1d5/0x6b0 [ 85.461413][ T6130] ? down_read+0x77/0xb0 [ 85.461510][ T6130] copy_string_kernel+0x1c6/0x460 [ 85.461657][ T6130] do_execveat_common+0x650/0x8a0 [ 85.461773][ T6130] __x64_sys_execveat+0x76/0xa0 [ 85.461900][ T6130] x64_sys_call+0x21ae/0x2550 [ 85.461995][ T6130] do_syscall_64+0x112/0x360 [ 85.462111][ T6130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.462275][ T6130] RIP: 0033:0x7f6aa679e159 [ 85.462338][ T6130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.462383][ T6130] RSP: 002b:00007f6aa51f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 85.462572][ T6130] RAX: ffffffffffffffda RBX: 00007f6aa6a25fa0 RCX: 00007f6aa679e159 [ 85.462624][ T6130] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 85.462739][ T6130] RBP: 00007f6aa683503b R08: 0000000000001000 R09: 0000000000000000 [ 85.462830][ T6130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.462932][ T6130] R13: 00007f6aa6a26038 R14: 00007f6aa6a25fa0 R15: 00007ffe0a05f898 [ 85.463005][ T6130] [ 85.475907][ T5394] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.528330][ T3021] 8021q: adding VLAN 0 to HW filter on device eth23 [ 85.762150][ T6142] loop4: detected capacity change from 0 to 512 [ 85.768481][ T6142] EXT4-fs: Ignoring removed nobh option [ 85.785711][ T6147] loop2: detected capacity change from 0 to 512 [ 85.793920][ T6147] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.812762][ T6142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.812878][ T6142] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.843469][ T6142] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 3: comm syz.4.588: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 85.845994][ T6142] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 3: comm syz.4.588: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 85.853969][ T6147] EXT4-fs (loop2): 1 truncate cleaned up [ 85.854873][ T6147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.038759][ T6155] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 13: comm syz.2.591: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 86.060061][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.118574][ T5394] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.149158][ T6163] lo speed is unknown, defaulting to 1000 [ 86.154985][ T6163] lo speed is unknown, defaulting to 1000 [ 86.165556][ T6163] lo speed is unknown, defaulting to 1000 [ 86.382056][ T6163] infiniband syz1: set active [ 86.382081][ T6163] infiniband syz1: added lo [ 86.382524][ T3411] lo speed is unknown, defaulting to 1000 [ 86.415252][ T6163] RDS/IB: syz1: added [ 86.415280][ T6163] smc: adding ib device syz1 with port count 1 [ 86.415302][ T6163] smc: ib device syz1 port 1 has no pnetid [ 86.415817][ T6163] lo speed is unknown, defaulting to 1000 [ 86.416243][ T3411] lo speed is unknown, defaulting to 1000 [ 86.682123][ T6163] lo speed is unknown, defaulting to 1000 [ 86.937313][ T6237] loop1: detected capacity change from 0 to 512 [ 86.947044][ T6163] lo speed is unknown, defaulting to 1000 [ 86.966025][ T6237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.966108][ T6237] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.999403][ T6237] capability: warning: `syz.1.608' uses 32-bit capabilities (legacy support in use) [ 87.049433][ T5441] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.165611][ T6189] lo speed is unknown, defaulting to 1000 [ 87.256663][ T6163] lo speed is unknown, defaulting to 1000 [ 87.310477][ T6163] lo speed is unknown, defaulting to 1000 [ 87.392968][ T6163] lo speed is unknown, defaulting to 1000 [ 87.500202][ T4993] Buffer I/O error on dev loop0, logical block 12, lost sync page write [ 87.524511][ T6189] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.524564][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.524806][ T6189] bridge_slave_0: entered allmulticast mode [ 87.526146][ T6189] bridge_slave_0: entered promiscuous mode [ 87.528643][ T6189] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.528751][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.529177][ T6189] bridge_slave_1: entered allmulticast mode [ 87.530678][ T6189] bridge_slave_1: entered promiscuous mode [ 87.558351][ T6189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.562177][ T6189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.615030][ T6189] team0: Port device team_slave_0 added [ 87.621047][ T6189] team0: Port device team_slave_1 added [ 87.679537][ T6189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.679562][ T6189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.679601][ T6189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.725957][ T6189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.725978][ T6189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.726017][ T6189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.846111][ T6189] hsr_slave_0: entered promiscuous mode [ 87.846530][ T6189] hsr_slave_1: entered promiscuous mode [ 87.846781][ T6189] debugfs: 'hsr0' already exists in 'hsr' [ 87.846814][ T6189] Cannot create hsr debugfs directory [ 88.228594][ T3688] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.269284][ T3688] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.331743][ T6189] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 88.343064][ T6189] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.344867][ T6189] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 88.361618][ T6189] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.363431][ T6189] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 88.374090][ T6189] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.386386][ T3688] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.398725][ T6189] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 88.408914][ T6189] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.444940][ T3688] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.513585][ T6189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.555531][ T6189] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.560638][ T3021] 8021q: adding VLAN 0 to HW filter on device eth24 [ 88.591253][ T3690] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.591311][ T3690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.593891][ T3690] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.593950][ T3690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.622257][ T3688] bridge_slave_1: left allmulticast mode [ 88.622364][ T3688] bridge_slave_1: left promiscuous mode [ 88.622669][ T3688] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.641540][ T3688] bridge_slave_0: left allmulticast mode [ 88.641584][ T3688] bridge_slave_0: left promiscuous mode [ 88.641958][ T3688] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.830963][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 88.842731][ T3688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.853350][ T3688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.854469][ T3688] bond0 (unregistering): Released all slaves [ 88.872599][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 89.045894][ T3688] hsr_slave_0: left promiscuous mode [ 89.054253][ T3688] hsr_slave_1: left promiscuous mode [ 89.054937][ T3688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.055007][ T3688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.076777][ T3688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.076805][ T3688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.110810][ T3688] veth1_macvtap: left promiscuous mode [ 89.110858][ T3688] veth0_macvtap: left promiscuous mode [ 89.110953][ T3688] veth1_vlan: left promiscuous mode [ 89.111005][ T3688] veth0_vlan: left promiscuous mode [ 89.301638][ T3688] team0 (unregistering): Port device team_slave_1 removed [ 89.311237][ T3688] team0 (unregistering): Port device team_slave_0 removed [ 89.614091][ T6189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.999581][ T6189] veth0_vlan: entered promiscuous mode [ 90.017559][ T6189] veth1_vlan: entered promiscuous mode [ 90.044971][ T6189] veth0_macvtap: entered promiscuous mode [ 90.052809][ T6189] veth1_macvtap: entered promiscuous mode [ 90.068652][ T6189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.081041][ T6189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.242842][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 90.242873][ T29] audit: type=1400 audit(1788883243.370:930): avc: denied { mounton } for pid=6189 comm="syz-executor" path="/root/syzkaller.cYW2v0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=16420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 90.259716][ T3690] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.260342][ T3690] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.260451][ T3690] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.260588][ T3690] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.407047][ T29] audit: type=1400 audit(1788883243.530:931): avc: denied { execute_no_trans } for pid=6411 comm="syz.9.637" path="/37/file1" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.618423][ T29] audit: type=1400 audit(1788883243.740:932): avc: denied { write } for pid=6416 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.677760][ T29] audit: type=1400 audit(1788883243.800:933): avc: denied { write } for pid=6435 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.724495][ T6437] FAULT_INJECTION: forcing a failure. [ 90.724495][ T6437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.724542][ T6437] CPU: 1 UID: 0 PID: 6437 Comm: syz.9.630 Not tainted syzkaller #0 PREEMPT(lazy) [ 90.724577][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.724667][ T6437] Call Trace: [ 90.724674][ T6437] [ 90.724682][ T6437] __dump_stack+0x1d/0x30 [ 90.724713][ T6437] dump_stack_lvl+0x95/0xd0 [ 90.724766][ T6437] dump_stack+0x15/0x1b [ 90.724795][ T6437] should_fail_ex+0x262/0x280 [ 90.724828][ T6437] should_fail+0xb/0x20 [ 90.724868][ T6437] should_fail_usercopy+0x1a/0x20 [ 90.724976][ T6437] _copy_to_user+0x20/0xa0 [ 90.725012][ T6437] bpf_verifier_vlog+0x36e/0x5a0 [ 90.725065][ T6437] __btf_verifier_log+0x7f/0xb0 [ 90.725106][ T6437] __btf_verifier_log_type+0x302/0x330 [ 90.725150][ T6437] btf_datasec_check_meta+0x2a6/0x640 [ 90.725194][ T6437] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 90.725415][ T6437] ? sort+0x6c/0xa0 [ 90.725511][ T6437] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 90.725640][ T6437] btf_parse_type_sec+0x291/0x1520 [ 90.725808][ T6437] ? btf_parse_hdr+0x43a/0x440 [ 90.725974][ T6437] ? btf_parse_str_sec+0x1ae/0x1b0 [ 90.726092][ T6437] btf_new_fd+0x2ec/0x670 [ 90.726186][ T6437] bpf_btf_load+0x116/0x130 [ 90.726290][ T6437] __sys_bpf+0xbce/0xc30 [ 90.726404][ T6437] ? do_futex+0x390/0x460 [ 90.726521][ T6437] __x64_sys_bpf+0x69/0x80 [ 90.726617][ T6437] x64_sys_call+0xf26/0x2550 [ 90.726712][ T6437] do_syscall_64+0x112/0x360 [ 90.726838][ T6437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.726976][ T6437] RIP: 0033:0x7fd4777ce159 [ 90.727106][ T6437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.727168][ T6437] RSP: 002b:00007fd476227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.727241][ T6437] RAX: ffffffffffffffda RBX: 00007fd477a55fa0 RCX: 00007fd4777ce159 [ 90.727293][ T6437] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 90.727346][ T6437] RBP: 00007fd47786503b R08: 0000000000000000 R09: 0000000000000000 [ 90.727399][ T6437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.727443][ T6437] R13: 00007fd477a56038 R14: 00007fd477a55fa0 R15: 00007ffdb7916be8 [ 90.727585][ T6437] [ 90.962081][ T29] audit: type=1400 audit(1788883244.080:934): avc: denied { listen } for pid=6438 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.963937][ T29] audit: type=1400 audit(1788883244.090:935): avc: denied { accept } for pid=6438 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.020764][ T6447] lo speed is unknown, defaulting to 1000 [ 91.223972][ T6466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.224164][ T6466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.310358][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.310505][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.347627][ T29] audit: type=1400 audit(1788883244.470:936): avc: denied { write } for pid=6459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.441057][ T29] audit: type=1400 audit(1788883244.570:937): avc: denied { write } for pid=6484 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.472470][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.485633][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.569289][ T38] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.569494][ T38] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.569679][ T38] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.569803][ T38] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.653866][ T29] audit: type=1400 audit(1788883244.780:938): avc: denied { write } for pid=6486 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.704040][ T29] audit: type=1400 audit(1788883244.830:939): avc: denied { write } for pid=6498 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.416672][ T6564] FAULT_INJECTION: forcing a failure. [ 92.416672][ T6564] name failslab, interval 1, probability 0, space 0, times 0 [ 92.416718][ T6564] CPU: 1 UID: 0 PID: 6564 Comm: syz.9.656 Not tainted syzkaller #0 PREEMPT(lazy) [ 92.416800][ T6564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.416906][ T6564] Call Trace: [ 92.416922][ T6564] [ 92.416956][ T6564] __dump_stack+0x1d/0x30 [ 92.417049][ T6564] dump_stack_lvl+0x95/0xd0 [ 92.417125][ T6564] dump_stack+0x15/0x1b [ 92.417261][ T6564] should_fail_ex+0x262/0x280 [ 92.417343][ T6564] ? register_netdevice+0x1a2/0x11a0 [ 92.417467][ T6564] should_failslab+0x8c/0xb0 [ 92.417573][ T6564] __kmalloc_cache_noprof+0x7a/0x400 [ 92.417728][ T6564] ? register_netdevice+0x1a2/0x11a0 [ 92.417894][ T6564] register_netdevice+0x1a2/0x11a0 [ 92.418073][ T6564] vti6_tnl_create2+0x85/0x250 [ 92.418172][ T6564] vti6_locate+0x39c/0x440 [ 92.418284][ T6564] vti6_siocdevprivate+0x7a5/0xb50 [ 92.418411][ T6564] dev_ifsioc+0x8f5/0xfc0 [ 92.418548][ T6564] dev_ioctl+0x78c/0x960 [ 92.418716][ T6564] sock_ioctl+0x58f/0x610 [ 92.418801][ T6564] ? __pfx_sock_ioctl+0x10/0x10 [ 92.418886][ T6564] __se_sys_ioctl+0xce/0x140 [ 92.418994][ T6564] __x64_sys_ioctl+0x43/0x50 [ 92.419193][ T6564] x64_sys_call+0x239d/0x2550 [ 92.419320][ T6564] do_syscall_64+0x112/0x360 [ 92.419474][ T6564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.419628][ T6564] RIP: 0033:0x7fd4777ce159 [ 92.419690][ T6564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.419793][ T6564] RSP: 002b:00007fd476227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.419876][ T6564] RAX: ffffffffffffffda RBX: 00007fd477a55fa0 RCX: 00007fd4777ce159 [ 92.419921][ T6564] RDX: 0000200000000480 RSI: 00000000000089f1 RDI: 0000000000000004 [ 92.419972][ T6564] RBP: 00007fd47786503b R08: 0000000000000000 R09: 0000000000000000 [ 92.420076][ T6564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.420120][ T6564] R13: 00007fd477a56038 R14: 00007fd477a55fa0 R15: 00007ffdb7916be8 [ 92.420191][ T6564] [ 92.546009][ T4993] Buffer I/O error on dev loop0, logical block 12, lost sync page write [ 92.744459][ T6573] FAULT_INJECTION: forcing a failure. [ 92.744459][ T6573] name failslab, interval 1, probability 0, space 0, times 0 [ 92.744503][ T6573] CPU: 0 UID: 0 PID: 6573 Comm: syz.1.659 Not tainted syzkaller #0 PREEMPT(lazy) [ 92.744606][ T6573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.744624][ T6573] Call Trace: [ 92.744635][ T6573] [ 92.744646][ T6573] __dump_stack+0x1d/0x30 [ 92.744681][ T6573] dump_stack_lvl+0x95/0xd0 [ 92.744712][ T6573] dump_stack+0x15/0x1b [ 92.744798][ T6573] should_fail_ex+0x262/0x280 [ 92.744830][ T6573] should_failslab+0x8c/0xb0 [ 92.744952][ T6573] __kvmalloc_node_noprof+0x168/0x5c0 [ 92.744988][ T6573] ? pipapo_maybe_clone+0x278/0x870 [ 92.745033][ T6573] ? pipapo_maybe_clone+0x278/0x870 [ 92.745100][ T6573] pipapo_maybe_clone+0x278/0x870 [ 92.745174][ T6573] nft_pipapo_insert+0x9a/0xda0 [ 92.745219][ T6573] ? __nla_validate_parse+0x16c7/0x1d70 [ 92.745284][ T6573] ? __memcg_slab_post_alloc_hook+0x367/0x8d0 [ 92.745326][ T6573] ? nft_set_elem_init+0x7c/0x430 [ 92.745361][ T6573] ? should_fail_ex+0xdb/0x280 [ 92.745392][ T6573] ? nft_trans_alloc+0x1e/0x100 [ 92.745418][ T6573] ? should_failslab+0x8c/0xb0 [ 92.745467][ T6573] ? nft_trans_alloc+0x1e/0x100 [ 92.745496][ T6573] nft_setelem_insert+0x6a/0x210 [ 92.745534][ T6573] nf_tables_newsetelem+0x21de/0x2d80 [ 92.745646][ T6573] nfnetlink_rcv+0xbf7/0x1740 [ 92.745711][ T6573] netlink_unicast+0x5a9/0x680 [ 92.745801][ T6573] netlink_sendmsg+0x5be/0x6f0 [ 92.745845][ T6573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.745877][ T6573] ____sys_sendmsg+0x532/0x580 [ 92.746002][ T6573] ___sys_sendmsg+0x195/0x1e0 [ 92.746065][ T6573] __x64_sys_sendmsg+0xd4/0x160 [ 92.746162][ T6573] x64_sys_call+0x22ab/0x2550 [ 92.746196][ T6573] do_syscall_64+0x112/0x360 [ 92.746238][ T6573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.746263][ T6573] RIP: 0033:0x7f114558e159 [ 92.746341][ T6573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.746367][ T6573] RSP: 002b:00007f1143fe7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.746434][ T6573] RAX: ffffffffffffffda RBX: 00007f1145815fa0 RCX: 00007f114558e159 [ 92.746453][ T6573] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 92.746471][ T6573] RBP: 00007f114562503b R08: 0000000000000000 R09: 0000000000000000 [ 92.746490][ T6573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.746508][ T6573] R13: 00007f1145816038 R14: 00007f1145815fa0 R15: 00007ffd127b0b18 [ 92.746583][ T6573] [ 93.043642][ T6573] syz.1.659 (6573) used greatest stack depth: 10008 bytes left [ 93.161874][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.5.664'. [ 93.185447][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.5.664'. [ 93.230915][ T6576] lo speed is unknown, defaulting to 1000 [ 93.241469][ T38] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.252025][ T38] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.252177][ T3690] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.252216][ T3690] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.282949][ T6603] loop9: detected capacity change from 0 to 512 [ 93.363880][ T6603] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.363959][ T6603] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.401940][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.665'. [ 93.401975][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.665'. [ 93.532964][ T5041] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.635524][ T6634] FAULT_INJECTION: forcing a failure. [ 93.635524][ T6634] name failslab, interval 1, probability 0, space 0, times 0 [ 93.635580][ T6634] CPU: 0 UID: 0 PID: 6634 Comm: syz.4.671 Not tainted syzkaller #0 PREEMPT(lazy) [ 93.635665][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.635691][ T6634] Call Trace: [ 93.635700][ T6634] [ 93.635711][ T6634] __dump_stack+0x1d/0x30 [ 93.635745][ T6634] dump_stack_lvl+0x95/0xd0 [ 93.635776][ T6634] dump_stack+0x15/0x1b [ 93.635824][ T6634] should_fail_ex+0x262/0x280 [ 93.635853][ T6634] ? skb_clone+0x151/0x1f0 [ 93.635888][ T6634] should_failslab+0x8c/0xb0 [ 93.635920][ T6634] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 93.635976][ T6634] ? skb_clone+0x151/0x1f0 [ 93.636021][ T6634] skb_clone+0x151/0x1f0 [ 93.636143][ T6634] __netlink_deliver_tap+0x2be/0x510 [ 93.636196][ T6634] netlink_unicast+0x656/0x680 [ 93.636230][ T6634] netlink_sendmsg+0x5be/0x6f0 [ 93.636331][ T6634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.636402][ T6634] sock_write_iter+0x2c5/0x2f0 [ 93.636456][ T6634] do_iter_readv_writev+0x4f6/0x5a0 [ 93.636617][ T6634] vfs_writev+0x2d3/0x8c0 [ 93.636648][ T6634] do_writev+0xe9/0x210 [ 93.636672][ T6634] __x64_sys_writev+0x45/0x50 [ 93.636781][ T6634] x64_sys_call+0x23c9/0x2550 [ 93.636823][ T6634] do_syscall_64+0x112/0x360 [ 93.636875][ T6634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.636907][ T6634] RIP: 0033:0x7f6aa679e159 [ 93.636930][ T6634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.636957][ T6634] RSP: 002b:00007f6aa51f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 93.636987][ T6634] RAX: ffffffffffffffda RBX: 00007f6aa6a25fa0 RCX: 00007f6aa679e159 [ 93.637038][ T6634] RDX: 0000000000000002 RSI: 0000200000009ac0 RDI: 0000000000000003 [ 93.637056][ T6634] RBP: 00007f6aa683503b R08: 0000000000000000 R09: 0000000000000000 [ 93.637075][ T6634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.637092][ T6634] R13: 00007f6aa6a26038 R14: 00007f6aa6a25fa0 R15: 00007ffe0a05f898 [ 93.637123][ T6634] [ 93.864551][ T6642] FAULT_INJECTION: forcing a failure. [ 93.864551][ T6642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.864597][ T6642] CPU: 0 UID: 0 PID: 6642 Comm: syz.9.674 Not tainted syzkaller #0 PREEMPT(lazy) [ 93.864632][ T6642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.864646][ T6642] Call Trace: [ 93.864654][ T6642] [ 93.864724][ T6642] __dump_stack+0x1d/0x30 [ 93.864759][ T6642] dump_stack_lvl+0x95/0xd0 [ 93.864791][ T6642] dump_stack+0x15/0x1b [ 93.864821][ T6642] should_fail_ex+0x262/0x280 [ 93.864846][ T6642] should_fail+0xb/0x20 [ 93.864910][ T6642] should_fail_usercopy+0x1a/0x20 [ 93.864944][ T6642] _copy_to_user+0x20/0xa0 [ 93.864977][ T6642] __se_sys_keyctl+0x422/0xb70 [ 93.865062][ T6642] ? __se_sys_futex+0x2f6/0x370 [ 93.865106][ T6642] ? xfd_validate_state+0x45/0xf0 [ 93.865146][ T6642] ? restore_fpregs_from_fpstate+0x61/0x110 [ 93.865176][ T6642] __x64_sys_keyctl+0x67/0x80 [ 93.865225][ T6642] x64_sys_call+0x1fe0/0x2550 [ 93.865257][ T6642] do_syscall_64+0x112/0x360 [ 93.865317][ T6642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.865348][ T6642] RIP: 0033:0x7fd4777ce159 [ 93.865369][ T6642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.865394][ T6642] RSP: 002b:00007fd476227028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 93.865437][ T6642] RAX: ffffffffffffffda RBX: 00007fd477a55fa0 RCX: 00007fd4777ce159 [ 93.865453][ T6642] RDX: ffffffffffffff40 RSI: 9999999999999999 RDI: 000000000000001f [ 93.865467][ T6642] RBP: 00007fd47786503b R08: 0000000000000000 R09: 0000000000000000 [ 93.865484][ T6642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.865501][ T6642] R13: 00007fd477a56038 R14: 00007fd477a55fa0 R15: 00007ffdb7916be8 [ 93.865527][ T6642] [ 94.133441][ T6654] netlink: 28 bytes leftover after parsing attributes in process `syz.9.677'. [ 94.133569][ T6654] netlink: 32 bytes leftover after parsing attributes in process `syz.9.677'. [ 94.133778][ T6654] netlink: 28 bytes leftover after parsing attributes in process `syz.9.677'. [ 94.167365][ T6654] netlink: 32 bytes leftover after parsing attributes in process `syz.9.677'. [ 94.221949][ T6664] loop2: detected capacity change from 0 to 128 [ 94.231261][ T6664] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 94.232337][ T6664] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.303345][ T5394] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.478709][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.683'. [ 95.125148][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.125300][ T6735] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.204129][ T6762] loop4: detected capacity change from 0 to 2048 [ 95.235319][ T6762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.254884][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 95.254908][ T29] audit: type=1400 audit(1788883248.380:1004): avc: denied { write } for pid=6761 comm="syz.4.698" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.283318][ T6735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.293383][ T6735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.333646][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.390752][ T6775] loop5: detected capacity change from 0 to 1024 [ 95.394825][ T6775] EXT4-fs: Ignoring removed oldalloc option [ 95.394943][ T6775] EXT4-fs: inline encryption not supported [ 95.395131][ T6775] ext4: Unknown parameter 'noacl' [ 95.400310][ T6777] random: crng reseeded on system resumption [ 95.403549][ T29] audit: type=1400 audit(1788883248.530:1005): avc: denied { write } for pid=6774 comm="syz.1.700" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 95.403589][ T29] audit: type=1400 audit(1788883248.530:1006): avc: denied { open } for pid=6774 comm="syz.1.700" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 95.443400][ T6777] Restarting kernel threads ... [ 95.444222][ T29] audit: type=1400 audit(1788883248.550:1007): avc: denied { ioctl } for pid=6774 comm="syz.1.700" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 95.448808][ T6777] Done restarting kernel threads. [ 95.524780][ T29] audit: type=1400 audit(1788883248.650:1008): avc: denied { write } for pid=6763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.569721][ T29] audit: type=1400 audit(1788883248.700:1009): avc: denied { write } for pid=6783 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.859066][ T364] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.859178][ T364] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.859229][ T364] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.859331][ T364] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.936082][ T6804] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 95.936124][ T6804] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 95.936177][ T6804] vhci_hcd vhci_hcd.0: Device attached [ 95.954583][ T6793] loop4: detected capacity change from 0 to 512 [ 95.957353][ T6798] rdma_rxe: rxe_newlink: failed to add lo [ 95.962996][ T6804] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 95.963079][ T6804] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 95.963191][ T6804] vhci_hcd vhci_hcd.0: Device attached [ 95.991404][ T6804] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 95.991428][ T6804] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 95.991462][ T6804] vhci_hcd vhci_hcd.0: Device attached [ 96.009479][ T6804] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 96.009554][ T6804] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 96.009648][ T6804] vhci_hcd vhci_hcd.0: Device attached [ 96.031624][ T6804] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 96.031657][ T6804] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 96.031791][ T6804] vhci_hcd vhci_hcd.0: Device attached [ 96.046650][ T6793] EXT4-fs (loop4): 1 orphan inode deleted [ 96.057207][ T6804] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(13) [ 96.057289][ T6804] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 96.057436][ T6804] vhci_hcd vhci_hcd.0: Device attached [ 96.059296][ T3693] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 96.059390][ T3693] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:13: Failed to release dquot type 1 [ 96.059462][ T3693] loop4: lost filesystem error report for type 5 error -117 [ 96.067266][ T6793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.081447][ T6793] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.088745][ T6804] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(15) [ 96.088814][ T6804] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 96.088913][ T6804] vhci_hcd vhci_hcd.0: Device attached [ 96.102209][ T6807] vhci_hcd: connection closed [ 96.102862][ T3693] vhci_hcd vhci_hcd.2: stop threads [ 96.102911][ T3693] vhci_hcd vhci_hcd.2: release socket [ 96.102992][ T3693] vhci_hcd vhci_hcd.2: disconnect device [ 96.103117][ T6811] vhci_hcd: connection closed [ 96.103402][ T6809] vhci_hcd: connection closed [ 96.105348][ T3693] vhci_hcd vhci_hcd.2: stop threads [ 96.105422][ T3693] vhci_hcd vhci_hcd.2: release socket [ 96.105493][ T3693] vhci_hcd vhci_hcd.2: disconnect device [ 96.105789][ T6805] vhci_hcd: connection closed [ 96.106016][ T3693] vhci_hcd vhci_hcd.2: stop threads [ 96.106136][ T3693] vhci_hcd vhci_hcd.2: release socket [ 96.106198][ T3693] vhci_hcd vhci_hcd.2: disconnect device [ 96.106511][ T3693] vhci_hcd vhci_hcd.2: stop threads [ 96.106569][ T3693] vhci_hcd vhci_hcd.2: release socket [ 96.106638][ T3693] vhci_hcd vhci_hcd.2: disconnect device [ 96.106784][ T6818] vhci_hcd: connection closed [ 96.108211][ T29] audit: type=1400 audit(1788883249.210:1010): avc: denied { ioctl } for pid=6796 comm="syz.5.705" path="/15/dev/infiniband/uverbs0" dev="devtmpfs" ino=670 ioctlcmd=0x1b01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 96.109307][ T11] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 96.119777][ T3693] vhci_hcd vhci_hcd.2: stop threads [ 96.119839][ T3693] vhci_hcd vhci_hcd.2: release socket [ 96.119915][ T3693] vhci_hcd vhci_hcd.2: disconnect device [ 96.132348][ T6816] vhci_hcd: connection closed [ 96.140952][ T6820] vhci_hcd: connection closed [ 96.144473][ T3693] vhci_hcd vhci_hcd.2: stop threads [ 96.144548][ T3693] vhci_hcd vhci_hcd.2: release socket [ 96.144621][ T3693] vhci_hcd vhci_hcd.2: disconnect device [ 96.148221][ T3693] vhci_hcd vhci_hcd.2: stop threads [ 96.148340][ T3693] vhci_hcd vhci_hcd.2: release socket [ 96.148413][ T3693] vhci_hcd vhci_hcd.2: disconnect device [ 96.166697][ T29] audit: type=1400 audit(1788883249.290:1011): avc: denied { write } for pid=6792 comm="syz.4.704" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.315604][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.465432][ T29] audit: type=1400 audit(1788883249.590:1012): avc: denied { write } for pid=6795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.566452][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 96.612202][ T6854] loop5: detected capacity change from 0 to 256 [ 96.864144][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'. [ 96.892699][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.724'. [ 97.122623][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 97.541513][ T6956] FAULT_INJECTION: forcing a failure. [ 97.541513][ T6956] name failslab, interval 1, probability 0, space 0, times 0 [ 97.541585][ T6956] CPU: 0 UID: 0 PID: 6956 Comm: syz.1.731 Not tainted syzkaller #0 PREEMPT(lazy) [ 97.541666][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.541738][ T6956] Call Trace: [ 97.541772][ T6956] [ 97.541810][ T6956] __dump_stack+0x1d/0x30 [ 97.541973][ T6956] dump_stack_lvl+0x95/0xd0 [ 97.542085][ T6956] dump_stack+0x15/0x1b [ 97.542159][ T6956] should_fail_ex+0x262/0x280 [ 97.542268][ T6956] ? alloc_vfsmnt+0x2d/0x2f0 [ 97.542373][ T6956] should_failslab+0x8c/0xb0 [ 97.542476][ T6956] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 97.542654][ T6956] ? alloc_vfsmnt+0x140/0x2f0 [ 97.542746][ T6956] ? alloc_vfsmnt+0x2d/0x2f0 [ 97.542853][ T6956] alloc_vfsmnt+0x2d/0x2f0 [ 97.542969][ T6956] clone_mnt+0x30/0x5d0 [ 97.543149][ T6956] copy_tree+0x2dc/0x890 [ 97.543289][ T6956] copy_mnt_ns+0x1d2/0x720 [ 97.543519][ T6956] create_new_namespaces+0x7f/0x420 [ 97.543774][ T6956] unshare_nsproxy_namespaces+0x115/0x150 [ 97.543899][ T6956] ksys_unshare+0x42b/0x710 [ 97.544023][ T6956] __x64_sys_unshare+0x1f/0x30 [ 97.544116][ T6956] x64_sys_call+0x1e33/0x2550 [ 97.544281][ T6956] do_syscall_64+0x112/0x360 [ 97.544404][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.544525][ T6956] RIP: 0033:0x7f114558e159 [ 97.544587][ T6956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.544636][ T6956] RSP: 002b:00007f1143fe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 97.544657][ T6956] RAX: ffffffffffffffda RBX: 00007f1145815fa0 RCX: 00007f114558e159 [ 97.544755][ T6956] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 97.544800][ T6956] RBP: 00007f114562503b R08: 0000000000000000 R09: 0000000000000000 [ 97.544843][ T6956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.544888][ T6956] R13: 00007f1145816038 R14: 00007f1145815fa0 R15: 00007ffd127b0b18 [ 97.544990][ T6956] [ 97.547990][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 97.580622][ T4993] Buffer I/O error on dev loop0, logical block 12, lost sync page write [ 97.960530][ T6991] netlink: 43 bytes leftover after parsing attributes in process `syz.5.733'. [ 98.170493][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.9.742'. [ 98.170525][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.9.742'. [ 98.170562][ T7020] netlink: 'syz.9.742': attribute type 6 has an invalid length. [ 98.170736][ T7020] netlink: 'syz.9.742': attribute type 6 has an invalid length. [ 98.195895][ T7016] loop5: detected capacity change from 0 to 164 [ 98.212065][ T7016] rock: directory entry would overflow storage [ 98.212078][ T7016] rock: sig=0x66, size=4, remaining=3 [ 98.239522][ T7016] device-mapper: table: 252:0: too large device [ 98.239546][ T7016] device-mapper: ioctl: error adding target to table [ 98.443678][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 98.522532][ T7051] syzkaller0: entered promiscuous mode [ 98.522566][ T7051] syzkaller0: entered allmulticast mode [ 98.572727][ T7025] loop2: detected capacity change from 0 to 256 [ 98.700892][ T7067] loop2: detected capacity change from 0 to 512 [ 98.708321][ T7067] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.719754][ T7067] EXT4-fs (loop2): 1 truncate cleaned up [ 98.720228][ T7067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.749470][ T5394] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.136379][ T7091] loop2: detected capacity change from 0 to 1024 [ 99.146810][ T7091] EXT4-fs: inline encryption not supported [ 99.146960][ T7091] EXT4-fs: Ignoring removed bh option [ 99.156682][ T7091] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 99.164908][ T7091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.208870][ T5394] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.287116][ T7097] __nla_validate_parse: 2 callbacks suppressed [ 99.287148][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'. [ 99.482725][ T7112] loop1: detected capacity change from 0 to 512 [ 99.494170][ T7112] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.771: inode has both inline data and extents flags [ 99.494217][ T7112] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.507409][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 99.507438][ C0] EXT4-fs (loop1): initial error at time 1788883252: ext4_orphan_get:1403: inode 15 [ 99.507463][ C0] EXT4-fs (loop1): last error at time 1788883252: ext4_orphan_get:1403: inode 15 [ 99.531374][ T7112] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.771: couldn't read orphan inode 15 (err -117) [ 99.531476][ T7112] loop1: lost filesystem error report for type 5 error -117 [ 99.532578][ T7112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.545843][ T7112] FAULT_INJECTION: forcing a failure. [ 99.545843][ T7112] name failslab, interval 1, probability 0, space 0, times 0 [ 99.545931][ T7112] CPU: 1 UID: 0 PID: 7112 Comm: syz.1.771 Not tainted syzkaller #0 PREEMPT(lazy) [ 99.546015][ T7112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.546065][ T7112] Call Trace: [ 99.546089][ T7112] [ 99.546119][ T7112] __dump_stack+0x1d/0x30 [ 99.546213][ T7112] dump_stack_lvl+0x95/0xd0 [ 99.546295][ T7112] dump_stack+0x15/0x1b [ 99.546370][ T7112] should_fail_ex+0x262/0x280 [ 99.546601][ T7112] ? syslog_print_all+0x79/0x3c0 [ 99.546693][ T7112] should_failslab+0x8c/0xb0 [ 99.546759][ T7112] __kmalloc_cache_noprof+0x7a/0x400 [ 99.546843][ T7112] ? syslog_print_all+0x79/0x3c0 [ 99.546986][ T7112] syslog_print_all+0x79/0x3c0 [ 99.547079][ T7112] ? avc_has_perm+0x101/0x190 [ 99.547181][ T7112] do_syslog+0x2fd/0x7f0 [ 99.547326][ T7112] ? restore_fpregs_from_fpstate+0x61/0x110 [ 99.547410][ T7112] __x64_sys_syslog+0x41/0x50 [ 99.547616][ T7112] x64_sys_call+0x1d36/0x2550 [ 99.547713][ T7112] do_syscall_64+0x112/0x360 [ 99.547862][ T7112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.547944][ T7112] RIP: 0033:0x7f114558e159 [ 99.548006][ T7112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.548075][ T7112] RSP: 002b:00007f1143fe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 99.548147][ T7112] RAX: ffffffffffffffda RBX: 00007f1145815fa0 RCX: 00007f114558e159 [ 99.548206][ T7112] RDX: 0000000000000063 RSI: 00002000000001c0 RDI: 0000000000000004 [ 99.548257][ T7112] RBP: 00007f114562503b R08: 0000000000000000 R09: 0000000000000000 [ 99.548300][ T7112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.548344][ T7112] R13: 00007f1145816038 R14: 00007f1145815fa0 R15: 00007ffd127b0b18 [ 99.548486][ T7112] [ 99.698342][ T5441] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.787292][ T7115] loop1: detected capacity change from 0 to 256 [ 99.997270][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.997720][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.046401][ T7123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.052262][ T7123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.090543][ T3681] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.090608][ T3681] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.090649][ T3681] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.090748][ T3681] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.265354][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 100.265397][ T29] audit: type=1326 audit(1788883253.390:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.9.779" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4777ce159 code=0x7ffc0000 [ 100.265493][ T29] audit: type=1326 audit(1788883253.390:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.9.779" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4777ce159 code=0x7ffc0000 [ 100.269470][ T29] audit: type=1326 audit(1788883253.390:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.9.779" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4777ce159 code=0x7ffc0000 [ 100.269606][ T29] audit: type=1326 audit(1788883253.390:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.9.779" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4777ce159 code=0x7ffc0000 [ 100.269759][ T29] audit: type=1326 audit(1788883253.390:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.9.779" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4777ce159 code=0x7ffc0000 [ 100.273640][ T29] audit: type=1326 audit(1788883253.400:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.9.779" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd4777ce159 code=0x7ffc0000 [ 100.297403][ T29] audit: type=1326 audit(1788883253.420:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.9.779" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4777ce159 code=0x7ffc0000 [ 100.300570][ T29] audit: type=1326 audit(1788883253.430:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.9.779" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4777ce159 code=0x7ffc0000 [ 100.305187][ T29] audit: type=1326 audit(1788883253.430:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.9.779" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4777ce159 code=0x7ffc0000 [ 100.305583][ T29] audit: type=1326 audit(1788883253.430:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.9.779" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fd4777ce159 code=0x7ffc0000 [ 100.504044][ T7140] loop1: detected capacity change from 0 to 256 [ 100.627529][ T7153] netlink: 'syz.9.787': attribute type 1 has an invalid length. [ 100.650316][ T7153] bond1: (slave gretap1): making interface the new active one [ 100.657948][ T7153] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 100.673096][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.785'. [ 100.761453][ T7164] loop2: detected capacity change from 0 to 1024 [ 100.764225][ T7164] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.775797][ T7164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.807427][ T5394] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.857954][ T7173] loop2: detected capacity change from 0 to 512 [ 100.871658][ T7173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.871821][ T7173] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.925135][ T5394] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.966705][ T7177] loop2: detected capacity change from 0 to 512 [ 100.998764][ T7177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.999761][ T7177] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.040128][ T5394] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.106923][ T7007] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 101.283356][ T7196] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 101.408991][ T7221] FAULT_INJECTION: forcing a failure. [ 101.408991][ T7221] name failslab, interval 1, probability 0, space 0, times 0 [ 101.409067][ T7221] CPU: 1 UID: 0 PID: 7221 Comm: syz.4.811 Not tainted syzkaller #0 PREEMPT(lazy) [ 101.409092][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.409104][ T7221] Call Trace: [ 101.409111][ T7221] [ 101.409170][ T7221] __dump_stack+0x1d/0x30 [ 101.409194][ T7221] dump_stack_lvl+0x95/0xd0 [ 101.409216][ T7221] dump_stack+0x15/0x1b [ 101.409235][ T7221] should_fail_ex+0x262/0x280 [ 101.409256][ T7221] ? sctp_add_bind_addr+0x71/0x1e0 [ 101.409297][ T7221] should_failslab+0x8c/0xb0 [ 101.409325][ T7221] __kmalloc_cache_noprof+0x7a/0x400 [ 101.409417][ T7221] ? sctp_get_af_specific+0xc/0x60 [ 101.409439][ T7221] ? sctp_add_bind_addr+0x71/0x1e0 [ 101.409488][ T7221] sctp_add_bind_addr+0x71/0x1e0 [ 101.409591][ T7221] sctp_copy_local_addr_list+0x1b4/0x250 [ 101.409664][ T7221] sctp_copy_one_addr+0x7f/0x280 [ 101.409764][ T7221] sctp_bind_addr_copy+0x11b/0x290 [ 101.409837][ T7221] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 101.410011][ T7221] sctp_connect_new_asoc+0x1c3/0x3a0 [ 101.410270][ T7221] __sctp_connect+0x428/0x7a0 [ 101.410394][ T7221] sctp_getsockopt_connectx3+0x269/0x340 [ 101.410496][ T7221] sctp_getsockopt+0x910/0xaa0 [ 101.410658][ T7221] sock_common_getsockopt+0x60/0x70 [ 101.410753][ T7221] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 101.410877][ T7221] do_sock_getsockopt+0x2f5/0x570 [ 101.411000][ T7221] __x64_sys_getsockopt+0x11d/0x1a0 [ 101.411134][ T7221] x64_sys_call+0x1032/0x2550 [ 101.411275][ T7221] do_syscall_64+0x112/0x360 [ 101.411374][ T7221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.411459][ T7221] RIP: 0033:0x7f6aa679e159 [ 101.411521][ T7221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.411587][ T7221] RSP: 002b:00007f6aa51f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 101.411670][ T7221] RAX: ffffffffffffffda RBX: 00007f6aa6a25fa0 RCX: 00007f6aa679e159 [ 101.411783][ T7221] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 101.411826][ T7221] RBP: 00007f6aa683503b R08: 00002000000007c0 R09: 0000000000000000 [ 101.411877][ T7221] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.411914][ T7221] R13: 00007f6aa6a26038 R14: 00007f6aa6a25fa0 R15: 00007ffe0a05f898 [ 101.411986][ T7221] [ 101.841585][ T7242] loop9: detected capacity change from 0 to 256 [ 102.203272][ T7269] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.203470][ T7269] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.322459][ T7269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.335582][ T7269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.419952][ T3411] lo speed is unknown, defaulting to 1000 [ 102.420013][ T3411] syz1: Port: 1 Link DOWN [ 102.420005][ T6418] lo speed is unknown, defaulting to 1000 [ 102.429090][ T51] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.429204][ T51] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.429374][ T51] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.429512][ T51] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.429626][ T51] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.429721][ T51] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.429886][ T51] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.429982][ T51] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.434202][ T7302] bridge0: port 3(syz_tun) entered blocking state [ 102.434304][ T7302] bridge0: port 3(syz_tun) entered disabled state [ 102.434564][ T7302] syz_tun: entered allmulticast mode [ 102.436080][ T7302] syz_tun: entered promiscuous mode [ 102.436222][ T7302] bridge0: port 3(syz_tun) entered blocking state [ 102.436278][ T7302] bridge0: port 3(syz_tun) entered forwarding state [ 102.619942][ T4993] Buffer I/O error on dev loop0, logical block 12, lost sync page write [ 102.666225][ T7306] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 102.666285][ T7306] System zones: 1-12 [ 102.667038][ T7306] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #12: comm syz.9.832: missing EA_INODE flag [ 102.667128][ T7306] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 102.668489][ T7306] EXT4-fs error (device loop9): ext4_xattr_inode_iget:442: comm syz.9.832: error while reading EA inode 12 err=-117 [ 102.668611][ T7306] loop9: lost filesystem error report for type 5 error -117 [ 102.669098][ T7306] EXT4-fs (loop9): 1 orphan inode deleted [ 102.672820][ T7306] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.846576][ T7318] FAULT_INJECTION: forcing a failure. [ 102.846576][ T7318] name failslab, interval 1, probability 0, space 0, times 0 [ 102.846623][ T7318] CPU: 1 UID: 0 PID: 7318 Comm: syz.2.834 Not tainted syzkaller #0 PREEMPT(lazy) [ 102.846735][ T7318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.846750][ T7318] Call Trace: [ 102.846757][ T7318] [ 102.846766][ T7318] __dump_stack+0x1d/0x30 [ 102.846801][ T7318] dump_stack_lvl+0x95/0xd0 [ 102.846833][ T7318] dump_stack+0x15/0x1b [ 102.846862][ T7318] should_fail_ex+0x262/0x280 [ 102.846943][ T7318] ? tracefs_init_fs_context+0x33/0x90 [ 102.846976][ T7318] should_failslab+0x8c/0xb0 [ 102.847037][ T7318] __kmalloc_cache_noprof+0x7a/0x400 [ 102.847081][ T7318] ? tracefs_init_fs_context+0x33/0x90 [ 102.847117][ T7318] ? alloc_fs_context+0x41/0x570 [ 102.847140][ T7318] tracefs_init_fs_context+0x33/0x90 [ 102.847199][ T7318] alloc_fs_context+0x490/0x570 [ 102.847224][ T7318] fs_context_for_submount+0x28/0x90 [ 102.847256][ T7318] trace_automount+0x40/0x120 [ 102.847285][ T7318] ? lockref_get_not_dead+0x120/0x1c0 [ 102.847363][ T7318] ? __pfx_trace_automount+0x10/0x10 [ 102.847392][ T7318] debugfs_automount+0x5d/0x70 [ 102.847441][ T7318] __traverse_mounts+0x256/0x420 [ 102.847648][ T7318] step_into_slowpath+0x2d5/0x4c0 [ 102.847801][ T7318] link_path_walk+0x947/0xdd0 [ 102.847917][ T7318] path_openat+0xe7/0x10d0 [ 102.848023][ T7318] do_file_open+0x16c/0x290 [ 102.848149][ T7318] do_sys_openat2+0xa0/0x130 [ 102.848237][ T7318] __x64_sys_openat+0xf2/0x120 [ 102.848309][ T7318] x64_sys_call+0x1f72/0x2550 [ 102.848449][ T7318] do_syscall_64+0x112/0x360 [ 102.848623][ T7318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.848706][ T7318] RIP: 0033:0x7fba926ce159 [ 102.848773][ T7318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.848838][ T7318] RSP: 002b:00007fba91127028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 102.848920][ T7318] RAX: ffffffffffffffda RBX: 00007fba92955fa0 RCX: 00007fba926ce159 [ 102.848975][ T7318] RDX: 0000000000080201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 102.849091][ T7318] RBP: 00007fba9276503b R08: 0000000000000000 R09: 0000000000000000 [ 102.849149][ T7318] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 102.849192][ T7318] R13: 00007fba92956038 R14: 00007fba92955fa0 R15: 00007ffc4a08b5b8 [ 102.849294][ T7318] [ 103.142130][ T7326] EXT4-fs: Ignoring removed oldalloc option [ 103.170368][ T7326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.195918][ T7326] netlink: 'syz.2.846': attribute type 28 has an invalid length. [ 103.213008][ T5041] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.233887][ T5394] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.350674][ T7340] netlink: 'syz.2.839': attribute type 8 has an invalid length. [ 103.386731][ T7346] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.386923][ T7346] ext4 filesystem being mounted at /81/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.451663][ T7356] netlink: 'syz.2.843': attribute type 1 has an invalid length. [ 103.462559][ T7356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.480390][ T7356] bond1: (slave geneve2): making interface the new active one [ 103.488204][ T7356] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 103.580983][ T7367] set_capacity_and_notify: 3 callbacks suppressed [ 103.581011][ T7367] loop4: detected capacity change from 0 to 128 [ 103.603593][ T7369] netlink: 'syz.2.845': attribute type 1 has an invalid length. [ 103.621890][ T7369] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.655754][ T5041] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.661718][ T7369] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.664840][ T7369] bond2: (slave team0): Enslaving as a backup interface with an up link [ 103.911253][ T7395] netlink: 'syz.2.851': attribute type 1 has an invalid length. [ 103.928800][ T7395] 8021q: adding VLAN 0 to HW filter on device bond3 [ 104.256926][ T7436] loop5: detected capacity change from 0 to 512 [ 104.263905][ T7436] EXT4-fs: Ignoring removed i_version option [ 104.263951][ T7436] EXT4-fs: Ignoring removed oldalloc option [ 104.288042][ T7436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.343952][ T7448] loop9: detected capacity change from 0 to 1024 [ 104.370157][ T7448] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 104.370473][ T7448] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.395529][ T7448] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.857: bg 0: block 112: padding at end of block bitmap is not set [ 104.423778][ T7447] EXT4-fs error (device loop9): ext4_map_blocks:832: inode #15: comm syz.9.857: lblock 0 mapped to illegal pblock 0 (length 1) [ 104.430235][ T7447] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #15: comm syz.9.857: lblock 0 mapped to illegal pblock 0 (length 1) [ 104.437227][ T7448] EXT4-fs error (device loop9): ext4_free_blocks:6719: comm syz.9.857: Freeing blocks not in datazone - block = 0, count = 1 [ 104.499221][ T5041] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 104.552660][ T7461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.858'. [ 104.552774][ T7461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.858'. [ 104.586360][ T7467] loop9: detected capacity change from 0 to 512 [ 104.593860][ T7467] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 104.606410][ T7467] EXT4-fs (loop9): 1 truncate cleaned up [ 104.607248][ T7467] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.626462][ T7467] EXT4-fs (loop9): shut down requested (2) [ 104.633281][ T7467] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 104.633407][ T7467] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 104.672535][ T5041] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.720912][ T7472] syzkaller0: entered promiscuous mode [ 104.721002][ T7472] syzkaller0: entered allmulticast mode [ 104.794891][ T7477] FAULT_INJECTION: forcing a failure. [ 104.794891][ T7477] name failslab, interval 1, probability 0, space 0, times 0 [ 104.794974][ T7477] CPU: 1 UID: 0 PID: 7477 Comm: syz.4.862 Not tainted syzkaller #0 PREEMPT(lazy) [ 104.795006][ T7477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.795021][ T7477] Call Trace: [ 104.795030][ T7477] [ 104.795047][ T7477] __dump_stack+0x1d/0x30 [ 104.795082][ T7477] dump_stack_lvl+0x95/0xd0 [ 104.795114][ T7477] dump_stack+0x15/0x1b [ 104.795143][ T7477] should_fail_ex+0x262/0x280 [ 104.795241][ T7477] ? device_add+0x88/0x790 [ 104.795269][ T7477] should_failslab+0x8c/0xb0 [ 104.795348][ T7477] __kmalloc_cache_noprof+0x7a/0x400 [ 104.795393][ T7477] ? device_add+0x88/0x790 [ 104.795426][ T7477] device_add+0x88/0x790 [ 104.795500][ T7477] netdev_register_kobject+0x127/0x240 [ 104.795537][ T7477] register_netdevice+0xaf7/0x11a0 [ 104.795581][ T7477] tun_set_iff+0x5fe/0x870 [ 104.795623][ T7477] __tun_chr_ioctl+0x682/0x1550 [ 104.795689][ T7477] ? selinux_file_ioctl+0x33c/0x3c0 [ 104.795739][ T7477] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 104.795775][ T7477] tun_chr_ioctl+0x27/0x40 [ 104.795812][ T7477] __se_sys_ioctl+0xce/0x140 [ 104.795899][ T7477] __x64_sys_ioctl+0x43/0x50 [ 104.795936][ T7477] x64_sys_call+0x239d/0x2550 [ 104.795964][ T7477] do_syscall_64+0x112/0x360 [ 104.796076][ T7477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.796102][ T7477] RIP: 0033:0x7f6aa679e159 [ 104.796120][ T7477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.796141][ T7477] RSP: 002b:00007f6aa51f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.796163][ T7477] RAX: ffffffffffffffda RBX: 00007f6aa6a25fa0 RCX: 00007f6aa679e159 [ 104.796266][ T7477] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 104.796330][ T7477] RBP: 00007f6aa683503b R08: 0000000000000000 R09: 0000000000000000 [ 104.796389][ T7477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.796428][ T7477] R13: 00007f6aa6a26038 R14: 00007f6aa6a25fa0 R15: 00007ffe0a05f898 [ 104.796579][ T7477] [ 104.956798][ T6189] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.051907][ T7491] loop8: detected capacity change from 0 to 16384 [ 105.181030][ T7509] loop2: detected capacity change from 0 to 512 [ 105.189083][ T7509] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 105.199544][ T7499] loop8: detected capacity change from 16384 to 16383 [ 105.212287][ T7509] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.869: bad orphan inode 131083 [ 105.212329][ T7509] loop2: lost filesystem error report for type 5 error -117 [ 105.222838][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 105.222863][ C0] EXT4-fs (loop2): initial error at time 1788883258: ext4_orphan_get:1429 [ 105.222909][ C0] EXT4-fs (loop2): last error at time 1788883258: ext4_orphan_get:1429 [ 105.223413][ T7509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.269132][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 105.269168][ T29] audit: type=1400 audit(1788883258.390:1100): avc: denied { write } for pid=7507 comm="syz.2.869" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.398724][ T29] audit: type=1400 audit(1788883258.520:1101): avc: denied { ioctl } for pid=7519 comm="syz.5.873" path="socket:[19982]" dev="sockfs" ino=19982 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.399755][ T7522] netlink: 'syz.5.873': attribute type 8 has an invalid length. [ 105.399807][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.873'. [ 105.434758][ T7522] veth1_to_team: entered promiscuous mode [ 105.438637][ T7522] gretap0: entered promiscuous mode [ 105.456304][ T7522] veth1_to_team: left promiscuous mode [ 105.457329][ T7522] gretap0: left promiscuous mode [ 105.506193][ T29] audit: type=1400 audit(1788883258.630:1102): avc: denied { write } for pid=7513 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.552987][ T5394] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.571819][ T29] audit: type=1400 audit(1788883258.700:1103): avc: denied { write } for pid=7532 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.652439][ T29] audit: type=1326 audit(1788883258.780:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.2.875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba926ce159 code=0x7ffc0000 [ 105.652568][ T29] audit: type=1326 audit(1788883258.780:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.2.875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba926ce159 code=0x7ffc0000 [ 105.657695][ T29] audit: type=1326 audit(1788883258.780:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.2.875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba926ce159 code=0x7ffc0000 [ 105.657808][ T29] audit: type=1326 audit(1788883258.780:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.2.875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba926ce159 code=0x7ffc0000 [ 105.658831][ T29] audit: type=1326 audit(1788883258.780:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.2.875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fba926ce159 code=0x7ffc0000 [ 105.659197][ T29] audit: type=1326 audit(1788883258.780:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.2.875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba926ce159 code=0x7ffc0000 [ 106.536540][ T7616] loop5: detected capacity change from 0 to 256 [ 106.813131][ T7653] loop9: detected capacity change from 0 to 512 [ 107.241145][ T7685] FAULT_INJECTION: forcing a failure. [ 107.241145][ T7685] name failslab, interval 1, probability 0, space 0, times 0 [ 107.241210][ T7685] CPU: 1 UID: 0 PID: 7685 Comm: syz.9.904 Not tainted syzkaller #0 PREEMPT(lazy) [ 107.241248][ T7685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.241266][ T7685] Call Trace: [ 107.241274][ T7685] [ 107.241358][ T7685] __dump_stack+0x1d/0x30 [ 107.241480][ T7685] dump_stack_lvl+0x95/0xd0 [ 107.241581][ T7685] dump_stack+0x15/0x1b [ 107.241676][ T7685] should_fail_ex+0x262/0x280 [ 107.241814][ T7685] ? sctp_add_bind_addr+0x71/0x1e0 [ 107.241882][ T7685] should_failslab+0x8c/0xb0 [ 107.242044][ T7685] __kmalloc_cache_noprof+0x7a/0x400 [ 107.242180][ T7685] ? sctp_add_bind_addr+0x71/0x1e0 [ 107.242283][ T7685] sctp_add_bind_addr+0x71/0x1e0 [ 107.242339][ T7685] sctp_copy_local_addr_list+0x1b4/0x250 [ 107.242452][ T7685] sctp_copy_one_addr+0x7f/0x280 [ 107.242554][ T7685] sctp_bind_addr_copy+0x11b/0x290 [ 107.242638][ T7685] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 107.242827][ T7685] sctp_connect_new_asoc+0x1c3/0x3a0 [ 107.242959][ T7685] __sctp_connect+0x428/0x7a0 [ 107.243116][ T7685] sctp_getsockopt_connectx3+0x269/0x340 [ 107.243208][ T7685] sctp_getsockopt+0x910/0xaa0 [ 107.243321][ T7685] sock_common_getsockopt+0x60/0x70 [ 107.243413][ T7685] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 107.243588][ T7685] do_sock_getsockopt+0x2f5/0x570 [ 107.243773][ T7685] __x64_sys_getsockopt+0x11d/0x1a0 [ 107.243976][ T7685] x64_sys_call+0x1032/0x2550 [ 107.244114][ T7685] do_syscall_64+0x112/0x360 [ 107.244213][ T7685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.244305][ T7685] RIP: 0033:0x7fd4777ce159 [ 107.244366][ T7685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.244448][ T7685] RSP: 002b:00007fd476227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 107.244520][ T7685] RAX: ffffffffffffffda RBX: 00007fd477a55fa0 RCX: 00007fd4777ce159 [ 107.244581][ T7685] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 107.244624][ T7685] RBP: 00007fd47786503b R08: 00002000000007c0 R09: 0000000000000000 [ 107.244674][ T7685] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.244725][ T7685] R13: 00007fd477a56038 R14: 00007fd477a55fa0 R15: 00007ffdb7916be8 [ 107.244877][ T7685] [ 107.663152][ T4993] Buffer I/O error on dev loop0, logical block 12, lost sync page write [ 107.761035][ T7704] FAULT_INJECTION: forcing a failure. [ 107.761035][ T7704] name failslab, interval 1, probability 0, space 0, times 0 [ 107.761129][ T7704] CPU: 1 UID: 0 PID: 7704 Comm: syz.5.910 Not tainted syzkaller #0 PREEMPT(lazy) [ 107.761223][ T7704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.761237][ T7704] Call Trace: [ 107.761245][ T7704] [ 107.761253][ T7704] __dump_stack+0x1d/0x30 [ 107.761279][ T7704] dump_stack_lvl+0x95/0xd0 [ 107.761311][ T7704] dump_stack+0x15/0x1b [ 107.761396][ T7704] should_fail_ex+0x262/0x280 [ 107.761429][ T7704] ? tipc_conn_alloc+0x37/0x240 [ 107.761481][ T7704] should_failslab+0x8c/0xb0 [ 107.761531][ T7704] __kmalloc_cache_noprof+0x7a/0x400 [ 107.761577][ T7704] ? tipc_conn_alloc+0x37/0x240 [ 107.761620][ T7704] tipc_conn_alloc+0x37/0x240 [ 107.761657][ T7704] tipc_topsrv_kern_subscr+0xef/0x1e0 [ 107.761833][ T7704] ? tipc_group_create+0x61/0x270 [ 107.761955][ T7704] tipc_group_create+0x234/0x270 [ 107.762094][ T7704] tipc_sk_join+0x110/0x450 [ 107.762209][ T7704] ? lock_sock_nested+0x84/0x110 [ 107.762294][ T7704] tipc_setsockopt+0x594/0x620 [ 107.762454][ T7704] ? __pfx_tipc_setsockopt+0x10/0x10 [ 107.762560][ T7704] __sys_setsockopt+0x184/0x200 [ 107.762756][ T7704] __x64_sys_setsockopt+0x64/0x80 [ 107.762871][ T7704] x64_sys_call+0x248f/0x2550 [ 107.763031][ T7704] do_syscall_64+0x112/0x360 [ 107.763143][ T7704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.763215][ T7704] RIP: 0033:0x7f71e550e159 [ 107.763264][ T7704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.763362][ T7704] RSP: 002b:00007f71e3f67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 107.763383][ T7704] RAX: ffffffffffffffda RBX: 00007f71e5795fa0 RCX: 00007f71e550e159 [ 107.763399][ T7704] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 107.763519][ T7704] RBP: 00007f71e55a503b R08: 00000000000004bd R09: 0000000000000000 [ 107.763572][ T7704] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 107.763624][ T7704] R13: 00007f71e5796038 R14: 00007f71e5795fa0 R15: 00007ffc3ab43be8 [ 107.763701][ T7704] [ 108.057321][ T7712] loop5: detected capacity change from 0 to 256 [ 108.175371][ T7702] ================================================================== [ 108.175412][ T7702] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 108.175445][ T7702] [ 108.175452][ T7702] write to 0xffff88811a741b20 of 8 bytes by task 7706 on cpu 1: [ 108.175468][ T7702] shmem_file_splice_read+0x401/0x590 [ 108.175495][ T7702] splice_direct_to_actor+0x261/0x680 [ 108.175522][ T7702] do_splice_direct+0x119/0x1a0 [ 108.175547][ T7702] do_sendfile+0x37d/0x640 [ 108.175573][ T7702] __x64_sys_sendfile64+0x105/0x150 [ 108.175615][ T7702] x64_sys_call+0x1015/0x2550 [ 108.175651][ T7702] do_syscall_64+0x112/0x360 [ 108.175691][ T7702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.175720][ T7702] [ 108.175725][ T7702] write to 0xffff88811a741b20 of 8 bytes by task 7702 on cpu 0: [ 108.175747][ T7702] shmem_file_splice_read+0x401/0x590 [ 108.175774][ T7702] splice_direct_to_actor+0x261/0x680 [ 108.175799][ T7702] do_splice_direct+0x119/0x1a0 [ 108.175817][ T7702] do_sendfile+0x37d/0x640 [ 108.175841][ T7702] __x64_sys_sendfile64+0x105/0x150 [ 108.175894][ T7702] x64_sys_call+0x1015/0x2550 [ 108.175932][ T7702] do_syscall_64+0x112/0x360 [ 108.175961][ T7702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.175985][ T7702] [ 108.175990][ T7702] value changed: 0x00000000000013f1 -> 0x00000000000013f2 [ 108.176006][ T7702] [ 108.176012][ T7702] Reported by Kernel Concurrency Sanitizer on: [ 108.176027][ T7702] CPU: 0 UID: 0 PID: 7702 Comm: syz.1.911 Not tainted syzkaller #0 PREEMPT(lazy) [ 108.176061][ T7702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.176080][ T7702] ================================================================== [ 111.724940][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 111.724965][ T29] audit: type=1400 audit(1788883264.850:1146): avc: denied { write } for pid=7713 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.771121][ T29] audit: type=1400 audit(1788883264.900:1147): avc: denied { write } for pid=7724 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.172766][ T29] audit: type=1400 audit(1788883265.300:1148): avc: denied { write } for pid=7727 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.206062][ T29] audit: type=1400 audit(1788883265.330:1149): avc: denied { write } for pid=7738 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.303160][ T29] audit: type=1400 audit(1788883265.430:1150): avc: denied { write } for pid=7741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.339288][ T29] audit: type=1400 audit(1788883265.470:1151): avc: denied { write } for pid=7752 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.516979][ T29] audit: type=1400 audit(1788883265.640:1152): avc: denied { write } for pid=7755 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.551309][ T29] audit: type=1400 audit(1788883265.680:1153): avc: denied { write } for pid=7766 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.699026][ T4993] Buffer I/O error on dev loop0, logical block 12, lost sync page write [ 112.789871][ T29] audit: type=1400 audit(1788883265.920:1154): avc: denied { write } for pid=7769 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.824795][ T29] audit: type=1400 audit(1788883265.950:1155): avc: denied { write } for pid=7780 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.179061][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.749021][ T4993] Buffer I/O error on dev loop0, logical block 12, lost sync page write