last executing test programs: 1m32.509195472s ago: executing program 4 (id=31): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @empty}, 0x1c) listen(r0, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0x0, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) close_range(r1, r1, 0x400000000000000) (fail_nth: 1) capset(0x0, &(0x7f0000000140)) 1m32.159640764s ago: executing program 4 (id=32): r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c0005002d5601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 1m32.035926128s ago: executing program 4 (id=34): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) (async) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) listen(r1, 0x8000) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x319801) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb, 0x50, r3, 0x0) (async) madvise(&(0x7f0000515000/0x3000)=nil, 0x3000, 0x18) (async) timer_delete(r2) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x86, 0x8, 0x94, 0x7fff0002}]}) (async) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b0000"], 0x38}}, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) (async) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) (async) setpgid(0x0, r7) (async) kexec_load(0x0, 0x0, 0x0, 0x0) 1m31.99519416s ago: executing program 4 (id=36): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000300), 0xf3, 0x481, &(0x7f0000000900)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x20000002, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_clone(0x20002000, &(0x7f0000000040)="7588ca73e7d6da9f5bb1ff01ffb84e7a1012444628a74841656b92f9fac6b2370c6984eab7a2cd849f849e9c3d26460b0d006aedae75383d9cd91cb301d91453f454dde6296d16c7a185ee953cbf138cb912bf6a610000", 0x57, 0x0, &(0x7f0000000180), &(0x7f0000000340)="d54ddab6061f895a9fe58b9b8c5f419b4b81ed951bf8d498f5006034a3bd9bd53ddbb6d9257ea8526fa7a0096b080157c4afd34516c658177a7bf99a4180fcc744d5b700ccbbf6e04e4636fb7c582515877cb03fd1cf098ab05f6738b3da6fe7d2cad5af4b1578631436f975714a60d80a684d13906fee06d6e61612c21d8e45d62a87f2f8c8be236d156c79397ec1caa63748addeb4a09c730c6fe5df8c6cc0806eb54b182f4f1e41b62bb03363843287ebb9987a0127fd1e79e8a84fb35a1fad136c5b3b68772a69f2ef69c184ed6ce3dbfa066708604cbf55d023ba44c3a66e24d91485584015096a14590e357e37934fd7b4b5a2") openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) 1m31.509395175s ago: executing program 4 (id=42): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)={[{@noquota}, {@block_validity}, {@data_err_ignore}]}, 0x0, 0x53c, &(0x7f0000001440)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) 1m30.73987532s ago: executing program 4 (id=46): syz_clone(0x2300000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000280)={[0x7fffffff]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r5, 0x8, 0x3, 0x7}, 0x10) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) move_mount(0xffffffffffffff9c, 0x0, r6, 0x0, 0x146) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x45a0, 0x0, 0x800000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x5, r6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) getrlimit(0x9, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1m30.7380519s ago: executing program 32 (id=46): syz_clone(0x2300000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000280)={[0x7fffffff]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r5, 0x8, 0x3, 0x7}, 0x10) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) move_mount(0xffffffffffffff9c, 0x0, r6, 0x0, 0x146) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x45a0, 0x0, 0x800000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x5, r6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) getrlimit(0x9, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 3.451569647s ago: executing program 5 (id=725): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a90000000060a010400000000000000000a0000040900010073797a310000000064000480340001800c0001007061796c6f61640024000280080001400000000a080003400000004f080004400000003808000240000000012c0001800a00010072656469720000001c00028008000240000000130800034000000029080001400000000e0900020073797a32"], 0x6c1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) 3.402247039s ago: executing program 5 (id=726): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00#\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) socket$tipc(0x1e, 0x5, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xb, 0x10, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2, 0xd}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40885}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$eJzs3c9vI1cdAPDvTH65222zCz1ABewChQWt1t5421XVS8sFhKpKiIoD4rANiTcKseMQO6UJkUj/BpBA4gR/AgckDkg9ceDGEYkDQpQDUoEItEHiYDRjJ+smNmtqx+7Gn480O/Pmzcz3PWdn3vNz4hfA1LoeEQcRMR8Rb0TEYmd/0lnilfaSHffgcH/l6HB/JYlW6/W/J3l+ti+6zsk82blmISK+/pWIbydn4zZ29zaWq9XKdiddata2So3dvVvrteW1ylpls1y+u3T39ot3XiiPrK7Xar9478vrr37j17/65Lu/O/ji97NiXe7kdddjlNpVnzuJk5mNiFfPI9gEzHTW8xMuBx9MGhEfiYjP5Pf/Yszk/zsBgIus1VqM1mJ3GgC46NJ8DCxJixGRpp1OQLE9hvdMXEqr9Ubz5v36zuZqe6zsSsyl99erldtXF/7w3fzguSRLL+V5eX6eLp9K34mIqxHxo4Un8nRxpV5dnUyXBwCm3pPd7X9E/GshTYvFgU7t8akeAPDYKEy6AADA2Gn/AWD6aP8BYPoM0P53Puw/OPeyAADj4f0/AEwf7T8ATB/tPwBMla+99lq2tI4633+9+ubuzkb9zVurlcZGsbazUlypb28V1+r1tfw7e2qPul61Xt9aej523io1K41mqbG7d69W39ls3su/1/teZW4stQIA/per1975fRIRBy89kS/RNZeDthoutnSERwGPl5lhTtZBgMea2b5geg3UhOedhN+ee1mAyej5Zd6Fnpvv95P/I4jfM4IPlRsfH3z83xzPcLEY2Yfp9cHG/18eeTmA8TP+D9Or1UpOz/k/f5IFAFxIQ/wKX+sHo+qEABP1qMm8R/L5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwwlyPiO5GkxXwu8DT7Ny0WI56KiCsxl9xfr1ZuR8TTcS0i5hay9NKkCw0ADCn9a9KZ/+vG4nOXT+fOJ/9eyNcR8b2fvv7jt5abze2lbP8/TvYvHE8fVn543hDzCgIAg/vzIAfl7Xe5s+56I//gcH/leDnHMp7x3pdOJh9dOTrcz5d2zmy0Wq1WRCHvS1z6ZxKznXMKEfFsRMyMIP7B2xHxsV71T/KxkSudmU+740cn9lNjjZ++L36a57XX2cv30RGUBabNO9nz55Ve918a1/N17/u/kD+hhpc//woRx8++o674s51IMz3iZ/f89UFjPP+br57Z2Vps570d8exsr/jJSfykT/znBoz/x0986ocv98lr/SziRvSO3x2r1KxtlRq7e7fWa8trlbXKZrl8d+nu7RfvvFAu5WPUpeOR6rP+9tLNp/uVLav/pT7xCz3rP39y7ucGrP/P//PGtz79MLlwOv4XPtv75/9Mz/htWZv4+QHjL1/6Zd/pu7P4q33q/6if/80B47/7l73VAQ8FAMagsbu3sVytVraH2sjehY7iOmc2siIOdvBxd3G4oH+KfGNEL0ufjawzNsjBc+f1qp77xuxJX3G0V/5mdsUxVycdeS2G2ngwrliTeyYB4/Hwpp90SQAAAAAAAAAAAAAAgH7G8adLk64jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9d/AwAA//8+JMPM") connect$inet(0xffffffffffffffff, 0x0, 0x0) lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) r4 = socket$inet(0x2, 0x5, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) tee(r5, 0xffffffffffffffff, 0xf3a, 0x4) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000200)=""/188) setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f0000000180)=0x79, 0x4) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 3.033948651s ago: executing program 5 (id=732): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000640)=@polexpire={0xd4, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private0, @in6=@remote}, {}, {0x0, 0xfffffffffffffffd, 0x200000000}, 0x0, 0x8000000}}, [@mark={0xc}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20040081}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000002080)={0xfc, {"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", 0xa75}}, 0x1006) 2.971209283s ago: executing program 0 (id=734): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x5, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x0, 0x4, 0x54, 0x0, 0x6}, 0x9c) prlimit64(0xffffffffffffffff, 0xb, &(0x7f0000000040)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x40, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x9}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xffff7ffc, @loopback}, 0x1c) flock(0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xb06ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x8594, 0xa4, 0xffffffff, 0x7, 0x8000007f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000008b80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private2, 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="cfabaa", 0x3}], 0x1}}, {{&(0x7f00000003c0)={0xa, 0x4e23, 0x8, @private1, 0x4}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000440)="fa", 0x1}], 0x1}}], 0x2, 0x240408d1) shutdown(r6, 0x1) setsockopt(r6, 0x84, 0x80, &(0x7f00000001c0)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @remote}}}, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x6, 0x4) 2.867859287s ago: executing program 5 (id=738): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x37) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012ef", 0x58}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}}, 0x40000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2.845489098s ago: executing program 5 (id=741): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x7, 0x5}, {0x9, 0xfd, 0x5}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000540)=0x80000001) write$ppp(r1, &(0x7f00000001c0)="607e1518112c24", 0x7) quotactl_fd$Q_SYNC(r0, 0xffffffff80000102, 0x0, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0x0, 0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000600)={0x4, &(0x7f0000000200)=[{}, {@fixed}, {@fixed}, {}]}) add_key(&(0x7f0000000680)='asymmetric\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)="5037cc7ba80a73017b4932c4ec16297094f3c833e0779a26c0779aea190bf25f462e190d0b9deca58bb3b7df01c19ef9", 0x30, r3) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000640)) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000010000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd7000000000000200050028000000000000004c001200726663343534332867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000080024"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x101682) 2.75649743s ago: executing program 5 (id=742): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x2, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x0, 0x4, 0x54, 0x0, 0x6}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x1008) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs={0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x10e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001700), 0x8, 0xa0, 0x8, 0xfffffffffffffd9a, 0x0}}, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017"], 0x160}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0x7}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = socket(0x1e, 0x4, 0x0) r9 = accept$inet(r8, &(0x7f00000002c0), &(0x7f0000000300)=0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000340)={'vxcan1\x00', {0x2, 0x4e25, @empty}}) connect$tipc(r8, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r8, &(0x7f0000004400), 0x400000000000203, 0x101d0) write(r9, &(0x7f0000001340)="8f858e63dd7b5460efd8193e2340000a65bd8c002bcdcad174968c6b635ff45eea5696220228e43ad4170276c9329e78118f11da48ad5615756e9cffc39166394631c5de2057f532f1d2b610b8e1130cb17d9d965005e99366452843de4d9dff59f629207cc753ba6a89124d92d498f58515c8feaf8dcc9b2bf2aff2b540cc5da975839dd7e20a58e381b28b715b", 0x8e) 2.183909388s ago: executing program 1 (id=755): r0 = socket(0x10, 0x2, 0x0) r1 = getpgrp(0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x4, 0xffffffff, 0x7}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000075b000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00003b4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r2}, 0xc0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000700)={0x800100, 0xec, 0xc6f, 0x2, 0x6, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) write(r0, &(0x7f0000000480), 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000200001100090a2dbd7000fcdbdf25fe880000000000000000000000000001000004d602006c00cc011100ac141427030000000000000000000000fe880000000000000000000000000101ac1414bb000000000000000000000000200100000000000000000000000000025e030000000000000a000200fe8800000000000000000000000001017f000001000000000000000000000000fe880000000000000000000000000001ac1e00"], 0x200}, 0x1, 0x0, 0x0, 0x1}, 0x80) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) socket$inet(0x2, 0x3, 0x6) 2.016077144s ago: executing program 0 (id=758): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_config_ext={0xff, 0x10003}, 0xd, 0x0, 0x11000, 0x1, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x24, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x8, 0xfff3}, {}, {0xf, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (fail_nth: 2) 1.728846164s ago: executing program 1 (id=760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a90000000060a010400000000000000000a0000040900010073797a310000000064000480340001800c0001007061796c6f61640024000280080001400000000a080003400000004f080004400000003808000240000000012c0001800a00010072656469720000001c00028008000240000000130800034000000029080001400000000e0900020073797a32"], 0x6c1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) 1.648189786s ago: executing program 1 (id=763): r0 = socket$nl_route(0x10, 0x3, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000180), 0x4) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) (async) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x6d82d2b6}, 0x38) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000007000001140007800800114000000000080012400000ffff0500010006000000050005000a00000005000400000000000900020073"], 0x60}, 0x1, 0x0, 0x0, 0x400c084}, 0x20004000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, &(0x7f0000001080)=0x3, 0x4) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xb7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0000001000010400000000000000000b000000", @ANYRES32=0x0, @ANYBLOB="03800000000000002c00128009000100626f6e64000000001c000280050001000600000008000500060000000800040000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x7, 0x3, 0x1}, 0x50) (async) socket$kcm(0x29, 0x2, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r6, &(0x7f0000000040)=""/4109, 0x100d) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, r5, 0x20}, 0x38) 1.584134388s ago: executing program 0 (id=765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r1, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x5}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10}]}, 0x38}}, 0x24000000) (fail_nth: 6) 1.583791658s ago: executing program 0 (id=766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$SIOCSIFHWADDR(r0, 0x541b, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1b1) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101842, 0x22) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000f80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f40)={0x0}, 0x1, 0x0, 0x0, 0xf9fec7c91a9ae339}, 0x20000800) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf4ebba5277ffc775}}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {0x3, 0xffe0}, {0x1}, {0xa, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40080c5}, 0x4004044) mq_notify(r2, &(0x7f0000000b00)={0x0, 0x2c, 0x1, @thr={&(0x7f0000000940)="10a5712cbcf368531d856197dbd7d2e0256c50ccaae829d2560b46d54e200d08d921ca432cb5fe40668fc7277e4f41a785a0f7b907de205b5cd4bc8bd6aa42a17d629f22a8b5fa46514506d772f45c64ccc7f9fbc590d12523e020c988bbfc43cff7223c0d34b197e7d1df326a84fa950f5d14ba6696e1068b3d69084ef285cdff8bc175bc328986cafe2b60e9672b0fb0fadadda95a88b97f6e2dc2e9ad26bc3d993ddfdc4ac76b370381693a366532f696d9be0c8b964cbe6096b80fc0bd62c1857d6ef582bb3e5a6f91f4b69928bb525c5171", &(0x7f0000000a40)="5ec179eff9a88b9fe6d860254eb2dd7ad8344fa397e06bc8d7a6aaa14ccdf3fa1b401b1121266c44dad78a7eca21f95bbd4cc8fc2221556a8f4636213943af9a7b65fa0d16f6bc931f73640ad3696956dcde689dddaa287f5db59ca1a6c6892bd930149df568f1f79d42df16206dd2e669508e6028f8150ef2254d1c53ec3b0045391febd191f13f33"}}) 1.53887983s ago: executing program 2 (id=767): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00#\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) socket$tipc(0x1e, 0x5, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xb, 0x10, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2, 0xd}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40885}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") connect$inet(0xffffffffffffffff, 0x0, 0x0) lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) r3 = socket$inet(0x2, 0x5, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) tee(r4, 0xffffffffffffffff, 0xf3a, 0x4) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000200)=""/188) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000180)=0x79, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1.264127289s ago: executing program 2 (id=769): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_config_ext={0xff, 0x10003}, 0xd, 0x0, 0x11000, 0x1, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtclass={0x24, 0x28, 0x2, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff5}, {}, {0xf, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x3, 0x2, 0x4}) 1.114807834s ago: executing program 3 (id=770): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@loopback, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r2, 0x29, 0x4, 0x1, 0x4, 0x39, @dev={0xfe, 0x80, '\x00', 0x11}, @loopback, 0x700, 0x8759, 0x9, 0x29}}) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) socket$inet_tcp(0x2, 0x1, 0x0) 1.114373743s ago: executing program 2 (id=771): r0 = socket(0x10, 0x2, 0x0) r1 = getpgrp(0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x4, 0xffffffff, 0x7}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000075b000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00003b4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r2}, 0xc0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000700)={0x800100, 0xec, 0xc6f, 0x2, 0x6, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) write(r0, &(0x7f0000000480), 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000200001100090a2dbd7000fcdbdf25fe880000000000000000000000000001000004d602006c00cc011100ac141427030000000000000000000000fe880000000000000000000000000101ac1414bb000000000000000000000000200100000000000000000000000000025e030000000000000a000200fe8800000000000000000000000001017f000001000000000000000000000000fe880000000000000000000000000001ac1e00"], 0x200}, 0x1, 0x0, 0x0, 0x1}, 0x80) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) socket$inet(0x2, 0x3, 0x6) 1.028782546s ago: executing program 3 (id=772): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600e9ff850000002d000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020005000000000000000000000000850000007b0000009500"], 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) pwritev2(r4, &(0x7f00000004c0)=[{&(0x7f0000000400)="ccdd4dea", 0x4}], 0x1, 0x100, 0x3, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) bind$unix(r8, &(0x7f0000000000)=@abs, 0x6e) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/151, 0x97}], 0x1, 0x2, 0x5) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r10, &(0x7f0000003cc0)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000380)="d9588002", 0x4}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000002680)={r11, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000280)={r11, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}, 0x2, 0x1, 0x100, 0x9, 0x17, 0xfcd4, 0x6}, 0x9c) 930.681459ms ago: executing program 1 (id=773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a90000000060a010400000000000000000a0000040900010073797a310000000064000480340001800c0001007061796c6f61640024000280080001400000000a080003400000004f080004400000003808000240000000012c0001800a00010072656469720000001c00028008000240000000130800034000000029080001400000000e0900020073797a32"], 0x6c1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) 909.03165ms ago: executing program 1 (id=774): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x18, 0x54, 0x1, 0x70bd2b, 0x2, {0x7, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) recvfrom(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x20012123, &(0x7f0000001340)=@pppoe={0x18, 0x0, {0x4, @local, 'macsec0\x00'}}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x4}, 0x8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd70}, [@IFLA_LINK={0x8, 0x5, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x7e1280) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f00000000c0)={0x1, 0x6, 0xce60, {0x4, 0x8}, 0x80000001, 0x9}) 866.202801ms ago: executing program 1 (id=775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x40008001}, 0x400c000) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x800, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x2000000, r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) ioctl$SIOCSIFHWADDR(r5, 0x8948, &(0x7f0000000200)={'bond_slave_1\x00', @random="0106002010ff"}) unshare(0x10400) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xd}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x10000007}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x4040800) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f0000000140)='./file2\x00', 0x99) fallocate(r6, 0x0, 0xbf5, 0x2000402) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$netlink(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 865.673881ms ago: executing program 3 (id=776): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000003c0)="d4ed43ca0b514ae27e31338fdc8a2e73fef52243dc9981afbcf343287c4ce1065b88cfff471c3fb8e79b3d16a0ae68098482a6f271786fe8a174f4ddd013bee26a24c3fd931349803af43e417b0e0f104219e97dfb0fc66a1adfa9cbb1bf2389f16e59095aa713b6e7c85a63701b6598485f91f3d8f192574fd17ebc4e1956912faba7cd3542b37ecc23a323c050000000", 0x0}, 0x30) socket$igmp(0x2, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = add_key$fscrypt_v1(&(0x7f0000000a00), 0x0, &(0x7f0000000a80)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a38d11e1bf4f564e4379ac8b8e76076a335e6307bf7572aa1f72d48d2385170c0f", 0x18}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) stat(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0)) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000280)='batadv0\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x5, 0x80, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x4, 0xe, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = socket(0xc, 0x4, 0x1) capset(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20000008, 0xfffffffb}) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5603, 0x10000000000004) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x2b, 0x80801, 0x1) listen(r3, 0x10) recvfrom$unix(r2, 0x0, 0x0, 0x10000, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0xfb, 0x53, 0x3, 0x7a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x10, 0xe3e1, 0xcfe}}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) 755.980365ms ago: executing program 3 (id=777): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106320, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0xb) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0xc8d0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x1, 0x314, &(0x7f00000002c0)="$eJzs3M9rE1sUwPGTNEnTlHayeLzHE6QX3ehmaONeDNKCNGCpjfgDxGkz0ZAxKZlQiYhtV25ciH+Ei9JldwXtP9CNO1du3HUjuLALcSQzkx9tE1vTpLH2+4Eyh7n3zNybacK5AzM7d14/yWdtPWuUJRhVEhAR2RWJS1BqAv426MYRabYil4e/fjx/6+696WQqNTmr1FRy7kpCKTU69u7p8yG/2+agbMcf7HxJfN7+d/v/nR9zj3O2ytmqUCwrQ80XP5WNectUmZyd15WasUzDNlWuYJslr91ZFrFMlbWKi4sVZRQyI7HFkmnbyihUVN6sqHJRlUsVZTwycgWl67oaiQkOk16bnTWSHSYvdHkw6JFSKWkMiMjQgZb0Wl8GBAAA+sqv/+vVfrBa0ndS/4emk6mQv7NR/69f2CoP394Y9ev/zUi1/hdpqv8fNo5lqkywXv9HRaRR/xe99UG36/+DFdHp9mrvxRHHqYeRVv2PVf/jlKjW/zH/++tavb8+7gbU/wAAAAAAAAAAAAAAAAAAAAAAnAa7jqM5jqN52wF/r6MNikjUfYLEa+/zMNEje69/44/rfzY0XtwRGhWxXi6ll9Le1u+wJSKWmDIumnx3/x981TiyotxOqiou761lP395Ke39liSzknPzJ0ST+P58x5m6kZqcUJ69+WGJNecnRJN/Wucn9ueHq9uIXLrYlK+LJh8WpCiWZPwn42r5LyaUun4zte/8Q24/AAAAAAD+Brqqq6/fB5vb9YPt3vrYa/fW1yFpfX/AW1+Pt1zfh+RcqF+zBgAAAADgbLErz/KGZZmlHgWrItLjU7QJajM8albtBblt+gQk0K6pC0Ht5J2lV8fWtfGEj/SJBTsa6ljkNy9Ky6B226hdH5np5MiOJnLcz/C/N2+//bqPd2dM5CgHvLoRPWSmnQaRw2YaPrEfIAAAAAAnplH01/Zc6++AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4g07iVXz9niMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwp/gZAAD//8mG/kg=") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000001000013020000000000000000000002000000000000956cf0"], 0x0, 0x32}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) eventfd(0x7) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="658300000000000000000100"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 644.888799ms ago: executing program 3 (id=778): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x37) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd2", 0x59}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}}, 0x40000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 606.21504ms ago: executing program 3 (id=779): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) fcntl$setstatus(r0, 0x403, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x410, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x300}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000580)='cpu<-0||!') 589.43527ms ago: executing program 2 (id=780): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00#\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) socket$tipc(0x1e, 0x5, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xb, 0x10, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2, 0xd}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40885}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") connect$inet(0xffffffffffffffff, 0x0, 0x0) lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) r3 = socket$inet(0x2, 0x5, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) tee(r4, 0xffffffffffffffff, 0xf3a, 0x4) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000200)=""/188) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000180)=0x79, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 488.030604ms ago: executing program 0 (id=781): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) personality(0x400000a) (fail_nth: 6) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)) 454.067215ms ago: executing program 2 (id=782): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x20, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}}, 0x20}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000010) read(r0, &(0x7f0000000140)=""/166, 0xa6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xfffffffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24020050) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000440), 0x111080, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x3}, 0x1c) recvmmsg(r3, &(0x7f0000008800)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x80000001}], 0x2, 0x22, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x6004800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265"], 0x78}}, 0x0) 98.232746ms ago: executing program 0 (id=783): r0 = getpid() r1 = perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x80, 0x2, 0x2, 0x6, 0x9, 0x0, 0x3, 0x80e05, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0x2}, 0x4580, 0xb, 0x84, 0x9, 0xd4, 0x2e34, 0x0, 0x0, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0x32}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0xff24, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) ptrace$setregset(0x4205, r2, 0x201, &(0x7f00000003c0)={&(0x7f0000000340)="a4b7c028aa4807668f1e3d1814cd379e1dafc2ca425742f4115c3b7699da2874b53cce6ff194a99b3f988d5cf3c7624d102c2732520e138a7357cbc25ee59866d15a81878d4f2da5696646be790884564bf5f54a6a82bddf5026ebca7f6b2f270aa88d36", 0x64}) perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffd2a, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x3e}, 0x108012, 0xac5d}, 0x0, 0xffffffffffffffff, r1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f0"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x7a, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd606ed6c400442ffffc020000000000000000000000000000ff020000000000000000000000000001242088a80000fffc000008f2ffff85dd88a888be08000000100800000100000000000001080022eb0000000420000000020000f763000000000000000800655800000000b308af962398499cff53a41b130ea612ef2482495a01c732c921030da3bfb52202eebcf30c1a0b4df463239c341d3f3427ca598f17663dd1b3cff83503636f076864c681f19b34c227cdcc15a22fc0b23c4a158d7bf2f6ddf0"], 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x0, 0x8ffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x7800, 0x760, 0xfffffff9, 0x4f1, {{0x6, 0x4, 0x2, 0x15, 0x18, 0x64, 0x0, 0x7, 0x29, 0x0, @multicast1, @multicast1, {[@end, @end]}}}}}) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000540)={0x1, 0x4, 0x81, 0xffff, @vifc_lcl_ifindex=r6, @multicast1}, 0x10) r7 = syz_pidfd_open(r0, 0x0) setns(r7, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) syz_clone(0xf01e4000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x40) 0s ago: executing program 2 (id=784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a90000000060a010400000000000000000a0000040900010073797a310000000064000480340001800c0001007061796c6f61640024000280080001400000000a080003400000004f080004400000003808000240000000012c0001800a00010072656469720000001c00028008000240000000130800034000000029080001400000000e0900020073797a32"], 0x6c1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) kernel console output (not intermixed with test programs): ext4_get_inode_loc:4885 [ 74.072508][ T4782] Quota error (device loop5): write_blk: dquota write failed [ 74.072713][ T4784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.081360][ T4782] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 74.104917][ T4784] FAULT_INJECTION: forcing a failure. [ 74.104917][ T4784] name failslab, interval 1, probability 0, space 0, times 0 [ 74.118218][ T4782] EXT4-fs (loop5): 1 truncate cleaned up [ 74.133229][ T4782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.157869][ T4784] CPU: 0 UID: 0 PID: 4784 Comm: syz.2.303 Not tainted syzkaller #0 PREEMPT(lazy) [ 74.157974][ T4784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 74.157985][ T4784] Call Trace: [ 74.157992][ T4784] [ 74.158000][ T4784] __dump_stack+0x1d/0x30 [ 74.158026][ T4784] dump_stack_lvl+0x95/0xd0 [ 74.158050][ T4784] dump_stack+0x15/0x1b [ 74.158151][ T4784] should_fail_ex+0x263/0x280 [ 74.158225][ T4784] should_failslab+0x8c/0xb0 [ 74.158298][ T4784] kmem_cache_alloc_noprof+0x66/0x3f0 [ 74.158325][ T4784] ? do_getname+0x2e/0x1c0 [ 74.158346][ T4784] do_getname+0x2e/0x1c0 [ 74.158504][ T4784] __se_sys_mknod+0x21/0xf0 [ 74.158538][ T4784] __x64_sys_mknod+0x43/0x50 [ 74.158626][ T4784] x64_sys_call+0x2acd/0x3020 [ 74.158647][ T4784] do_syscall_64+0x12c/0x3b0 [ 74.158674][ T4784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.158764][ T4784] RIP: 0033:0x7f4a5d5fce59 [ 74.158783][ T4784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.158845][ T4784] RSP: 002b:00007f4a5c057028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 74.158871][ T4784] RAX: ffffffffffffffda RBX: 00007f4a5d875fa0 RCX: 00007f4a5d5fce59 [ 74.158884][ T4784] RDX: 0000000000000001 RSI: 0000000000000400 RDI: 0000200000003cc0 [ 74.158944][ T4784] RBP: 00007f4a5c057090 R08: 0000000000000000 R09: 0000000000000000 [ 74.158995][ T4784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.159069][ T4784] R13: 00007f4a5d876038 R14: 00007f4a5d875fa0 R15: 00007fff1a3884b8 [ 74.159089][ T4784] [ 74.360563][ T3680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.393432][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.393958][ T4796] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.420131][ T4777] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 74.495968][ T28] audit: type=1400 audit(1780417560.327:1194): avc: denied { sqpoll } for pid=4799 comm="syz.5.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 74.510194][ T4796] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.901841][ T4814] ip6gretap1: entered promiscuous mode [ 74.908096][ T4814] ip6gretap1: entered allmulticast mode [ 75.148296][ T4812] EXT4-fs: test_dummy_encryption option not supported [ 75.325818][ T4814] syz.3.307 (4814) used greatest stack depth: 9344 bytes left [ 76.438821][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.243101][ T4826] set_capacity_and_notify: 6 callbacks suppressed [ 77.243120][ T4826] loop2: detected capacity change from 0 to 2048 [ 77.625545][ T4824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 77.637723][ T4824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 77.680468][ T4826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.712444][ T4832] loop1: detected capacity change from 0 to 1764 [ 78.103435][ T4841] FAULT_INJECTION: forcing a failure. [ 78.103435][ T4841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.145001][ T4841] CPU: 0 UID: 0 PID: 4841 Comm: syz.5.319 Not tainted syzkaller #0 PREEMPT(lazy) [ 78.145031][ T4841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 78.145045][ T4841] Call Trace: [ 78.145096][ T4841] [ 78.145105][ T4841] __dump_stack+0x1d/0x30 [ 78.145128][ T4841] dump_stack_lvl+0x95/0xd0 [ 78.145147][ T4841] dump_stack+0x15/0x1b [ 78.145167][ T4841] should_fail_ex+0x263/0x280 [ 78.145197][ T4841] should_fail+0xb/0x20 [ 78.145218][ T4841] should_fail_usercopy+0x1a/0x20 [ 78.145243][ T4841] _copy_to_user+0x20/0xa0 [ 78.145272][ T4841] simple_read_from_buffer+0xb5/0x130 [ 78.145333][ T4841] proc_fail_nth_read+0x10e/0x150 [ 78.145396][ T4841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.145422][ T4841] vfs_read+0x1ab/0x7f0 [ 78.145446][ T4841] ? __fget_files+0x184/0x1c0 [ 78.145530][ T4841] ? __rcu_read_unlock+0x4e/0x70 [ 78.145554][ T4841] ? __fget_files+0x184/0x1c0 [ 78.145573][ T4841] ? mutex_lock+0x57/0x90 [ 78.145627][ T4841] ksys_read+0xdc/0x1a0 [ 78.145654][ T4841] __x64_sys_read+0x40/0x50 [ 78.145686][ T4841] x64_sys_call+0x2886/0x3020 [ 78.145713][ T4841] do_syscall_64+0x12c/0x3b0 [ 78.145771][ T4841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.145822][ T4841] RIP: 0033:0x7f7995c5d68e [ 78.145840][ T4841] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 78.145860][ T4841] RSP: 002b:00007f79946f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.145884][ T4841] RAX: ffffffffffffffda RBX: 00007f79946f76c0 RCX: 00007f7995c5d68e [ 78.145899][ T4841] RDX: 000000000000000f RSI: 00007f79946f70a0 RDI: 0000000000000005 [ 78.145910][ T4841] RBP: 00007f79946f7090 R08: 0000000000000000 R09: 0000000000000000 [ 78.145946][ T4841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.145964][ T4841] R13: 00007f7995f16038 R14: 00007f7995f15fa0 R15: 00007fffe8286a78 [ 78.145993][ T4841] [ 78.446961][ T4848] FAULT_INJECTION: forcing a failure. [ 78.446961][ T4848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.522192][ T4848] CPU: 0 UID: 0 PID: 4848 Comm: syz.5.321 Not tainted syzkaller #0 PREEMPT(lazy) [ 78.522223][ T4848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 78.522298][ T4848] Call Trace: [ 78.522305][ T4848] [ 78.522313][ T4848] __dump_stack+0x1d/0x30 [ 78.522339][ T4848] dump_stack_lvl+0x95/0xd0 [ 78.522360][ T4848] dump_stack+0x15/0x1b [ 78.522447][ T4848] should_fail_ex+0x263/0x280 [ 78.522470][ T4848] should_fail+0xb/0x20 [ 78.522487][ T4848] should_fail_usercopy+0x1a/0x20 [ 78.522520][ T4848] _copy_from_user+0x1c/0xb0 [ 78.522625][ T4848] __sys_bpf+0x183/0x7e0 [ 78.522656][ T4848] __x64_sys_bpf+0x41/0x50 [ 78.522678][ T4848] x64_sys_call+0x10cb/0x3020 [ 78.522708][ T4848] do_syscall_64+0x12c/0x3b0 [ 78.522740][ T4848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.522763][ T4848] RIP: 0033:0x7f7995c9ce59 [ 78.522779][ T4848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.522856][ T4848] RSP: 002b:00007f79946f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.522946][ T4848] RAX: ffffffffffffffda RBX: 00007f7995f15fa0 RCX: 00007f7995c9ce59 [ 78.522961][ T4848] RDX: 0000000000000038 RSI: 0000200000001340 RDI: 000000000000001a [ 78.522976][ T4848] RBP: 00007f79946f7090 R08: 0000000000000000 R09: 0000000000000000 [ 78.522989][ T4848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.523000][ T4848] R13: 00007f7995f16038 R14: 00007f7995f15fa0 R15: 00007fffe8286a78 [ 78.523104][ T4848] [ 78.691924][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.707931][ T4855] loop0: detected capacity change from 0 to 1024 [ 78.723339][ T4855] EXT4-fs: Ignoring removed bh option [ 78.741099][ T4852] netlink: 168 bytes leftover after parsing attributes in process `syz.3.324'. [ 78.784336][ T4855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.903937][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.958471][ T4862] loop2: detected capacity change from 0 to 512 [ 78.995602][ T4862] EXT4-fs: Ignoring removed bh option [ 79.004875][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 79.004892][ T28] audit: type=1326 audit(1780417564.837:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.0.326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a74e1ce59 code=0x7ffc0000 [ 79.070785][ T4862] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 79.093272][ T4862] EXT4-fs (loop2): 1 truncate cleaned up [ 79.103653][ T28] audit: type=1326 audit(1780417564.837:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.0.326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a74e1ce59 code=0x7ffc0000 [ 79.141436][ T4862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.223182][ T4859] audit: audit_backlog=65 > audit_backlog_limit=64 [ 79.238145][ T28] audit: type=1326 audit(1780417564.837:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.0.326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a74e1ce59 code=0x7ffc0000 [ 79.290762][ T4859] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 79.313561][ T4859] audit: backlog limit exceeded [ 79.335590][ T28] audit: type=1326 audit(1780417564.837:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.0.326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f0a74e1ce59 code=0x7ffc0000 [ 79.392209][ T28] audit: type=1326 audit(1780417564.837:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.0.326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a74e1ce59 code=0x7ffc0000 [ 79.439736][ T28] audit: type=1326 audit(1780417564.867:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.0.326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a74e1ce59 code=0x7ffc0000 [ 79.491423][ T28] audit: type=1326 audit(1780417564.867:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.0.326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a74e1ce59 code=0x7ffc0000 [ 79.622375][ T4873] loop5: detected capacity change from 0 to 512 [ 79.623953][ T4852] loop3: detected capacity change from 0 to 512 [ 79.642926][ T4873] EXT4-fs (loop5): orphan cleanup on readonly fs [ 79.656184][ T4876] netlink: 44 bytes leftover after parsing attributes in process `syz.1.330'. [ 79.666350][ T4873] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.717920][ T4873] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 79.729351][ T4873] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.329: couldn't read orphan inode 26 (err -116) [ 79.756007][ T4873] loop5: lost filesystem error report for type 5 error -116 [ 79.756218][ T4873] EXT4-fs (loop5): Remounting filesystem read-only [ 79.763578][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 79.763597][ C0] EXT4-fs (loop5): initial error at time 1780417565: ext4_orphan_get:1402 [ 79.763621][ C0] EXT4-fs (loop5): last error at time 1780417565: ext4_orphan_get:1402 [ 79.806316][ T4852] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 79.843746][ T4873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.063205][ T3680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.076892][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.094302][ T4883] capability: warning: `syz.5.331' uses 32-bit capabilities (legacy support in use) [ 80.165708][ T4887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 80.202599][ T4889] loop1: detected capacity change from 0 to 1024 [ 80.218240][ T4887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 80.239730][ T4889] EXT4-fs: test_dummy_encryption option not supported [ 80.475502][ T4896] loop2: detected capacity change from 0 to 1024 [ 80.816078][ T4898] loop0: detected capacity change from 0 to 512 [ 81.218065][ T4901] loop3: detected capacity change from 0 to 1764 [ 81.227340][ T4896] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 81.241556][ T4896] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 81.254644][ T4896] EXT4-fs error (device loop2): ext4_get_journal_inode:5896: comm syz.2.333: inode #1: comm syz.2.333: iget: illegal inode # [ 81.272659][ T4896] loop2: lost filesystem error report for type 5 error -117 [ 81.274272][ T4896] EXT4-fs (loop2): no journal found [ 81.282729][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 81.282998][ C1] EXT4-fs (loop2): initial error at time 1780417567: ext4_get_journal_inode:5896 [ 81.283748][ C1] EXT4-fs (loop2): last error at time 1780417567: ext4_get_journal_inode:5896 [ 81.318777][ T4896] EXT4-fs (loop2): can't get journal size [ 81.345495][ T4896] EXT4-fs (loop2): failed to initialize system zone (-22) [ 81.359836][ T4896] EXT4-fs (loop2): mount failed [ 82.363790][ T4898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.424485][ T4898] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.514114][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.537586][ T4914] netlink: 52 bytes leftover after parsing attributes in process `syz.2.341'. [ 82.565069][ T4916] netlink: 'syz.5.343': attribute type 4 has an invalid length. [ 82.645381][ T4914] capability: warning: `syz.2.341' uses deprecated v2 capabilities in a way that may be insecure [ 82.676743][ T4929] netlink: 4 bytes leftover after parsing attributes in process `syz.5.345'. [ 82.687479][ T4914] loop2: detected capacity change from 0 to 512 [ 82.702738][ T4914] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 82.718566][ T4930] loop0: detected capacity change from 0 to 1764 [ 82.799134][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 82.884106][ T4913] loop2: detected capacity change from 0 to 128 [ 82.936695][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.948053][ T11] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 83.115886][ T4938] loop0: detected capacity change from 0 to 4096 [ 83.139780][ T4938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.646805][ T4913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.341'. [ 84.017698][ T4949] loop5: detected capacity change from 0 to 1024 [ 84.036685][ T28] kauditd_printk_skb: 140 callbacks suppressed [ 84.036713][ T28] audit: type=1400 audit(1780417569.697:1344): avc: denied { watch } for pid=4944 comm="syz.2.351" path="/67" dev="tmpfs" ino=375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.096292][ T4949] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 84.109230][ T4949] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 84.122505][ T4949] EXT4-fs error (device loop5): ext4_get_journal_inode:5896: comm syz.5.350: inode #1: comm syz.5.350: iget: illegal inode # [ 84.136444][ T4949] loop5: lost filesystem error report for type 5 error -117 [ 84.137776][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 84.151517][ C0] EXT4-fs (loop5): initial error at time 1780417569: ext4_get_journal_inode:5896 [ 84.160670][ C0] EXT4-fs (loop5): last error at time 1780417569: ext4_get_journal_inode:5896 [ 84.180451][ T4949] EXT4-fs (loop5): no journal found [ 84.188033][ T4949] EXT4-fs (loop5): can't get journal size [ 84.209404][ T4949] EXT4-fs (loop5): failed to initialize system zone (-22) [ 84.219311][ T4949] EXT4-fs (loop5): mount failed [ 84.359971][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.836130][ T4954] loop3: detected capacity change from 0 to 512 [ 84.961499][ T4956] netlink: 'syz.0.352': attribute type 4 has an invalid length. [ 85.015667][ T4954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.066671][ T4954] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.157270][ T4960] FAULT_INJECTION: forcing a failure. [ 85.157270][ T4960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.193794][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.208631][ T4960] CPU: 0 UID: 0 PID: 4960 Comm: syz.0.355 Not tainted syzkaller #0 PREEMPT(lazy) [ 85.208778][ T4960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 85.208863][ T4960] Call Trace: [ 85.208870][ T4960] [ 85.208879][ T4960] __dump_stack+0x1d/0x30 [ 85.208903][ T4960] dump_stack_lvl+0x95/0xd0 [ 85.208929][ T4960] dump_stack+0x15/0x1b [ 85.208947][ T4960] should_fail_ex+0x263/0x280 [ 85.208970][ T4960] should_fail+0xb/0x20 [ 85.208990][ T4960] should_fail_usercopy+0x1a/0x20 [ 85.209021][ T4960] _copy_to_user+0x20/0xa0 [ 85.209042][ T4960] bpf_test_finish+0x34d/0x4e0 [ 85.209076][ T4960] bpf_prog_test_run_xdp+0x663/0xa10 [ 85.209160][ T4960] ? __rcu_read_unlock+0x4e/0x70 [ 85.209182][ T4960] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.209207][ T4960] bpf_prog_test_run+0x204/0x340 [ 85.209236][ T4960] __sys_bpf+0x52e/0x7e0 [ 85.209299][ T4960] __x64_sys_bpf+0x41/0x50 [ 85.209352][ T4960] x64_sys_call+0x10cb/0x3020 [ 85.209440][ T4960] do_syscall_64+0x12c/0x3b0 [ 85.209467][ T4960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.209535][ T4960] RIP: 0033:0x7f0a74e1ce59 [ 85.209550][ T4960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.209565][ T4960] RSP: 002b:00007f0a7386f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.209663][ T4960] RAX: ffffffffffffffda RBX: 00007f0a75095fa0 RCX: 00007f0a74e1ce59 [ 85.209680][ T4960] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 85.209695][ T4960] RBP: 00007f0a7386f090 R08: 0000000000000000 R09: 0000000000000000 [ 85.209711][ T4960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 85.209725][ T4960] R13: 00007f0a75096038 R14: 00007f0a75095fa0 R15: 00007ffd5b0b6d18 [ 85.209742][ T4960] [ 85.572114][ T4967] loop2: detected capacity change from 0 to 1024 [ 85.608155][ T4967] EXT4-fs: Ignoring removed nobh option [ 85.663836][ T4967] EXT4-fs: Ignoring removed i_version option [ 85.689297][ T4967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.737458][ T28] audit: type=1400 audit(1780417571.567:1345): avc: denied { write } for pid=4966 comm="syz.2.358" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.826595][ T28] audit: type=1400 audit(1780417571.647:1346): avc: denied { ioctl } for pid=4984 comm="syz.0.363" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.861423][ T4967] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 85.887217][ T4987] Failed to initialize the IGMP autojoin socket (err -2) [ 85.894004][ T4967] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 952 with error 28 [ 85.917969][ T4967] EXT4-fs (loop2): This should not happen!! Data will be lost [ 85.917969][ T4967] [ 85.937431][ T4967] EXT4-fs (loop2): Total free blocks count 0 [ 85.946950][ T4967] EXT4-fs (loop2): Free/Dirty block details [ 85.967839][ T4967] EXT4-fs (loop2): free_blocks=20480 [ 85.973266][ T4967] EXT4-fs (loop2): dirty_blocks=960 [ 85.997818][ T4967] EXT4-fs (loop2): Block reservation details [ 86.003845][ T4967] EXT4-fs (loop2): i_reserved_data_blocks=60 [ 86.026644][ T4986] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 952 with max blocks 5 with error 28 [ 86.559410][ T3294] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 86.626575][ T4996] loop1: detected capacity change from 0 to 1764 [ 86.633547][ T4998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.364'. [ 86.645308][ T4999] loop5: detected capacity change from 0 to 512 [ 86.652464][ T28] audit: type=1400 audit(1780417572.477:1347): avc: denied { write } for pid=4994 comm="syz.3.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.731705][ T4999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.747719][ T4999] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.781674][ T4998] team0: Port device team_slave_0 removed [ 86.796672][ T28] audit: type=1400 audit(1780417572.627:1348): avc: denied { getopt } for pid=4994 comm="syz.3.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.851685][ T3680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.190729][ T28] audit: type=1400 audit(1780417573.027:1349): avc: denied { view } for pid=5009 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 87.394760][ T5012] loop2: detected capacity change from 0 to 1024 [ 87.432387][ T5012] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 87.444863][ T5012] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 87.458695][ T5012] EXT4-fs error (device loop2): ext4_get_journal_inode:5896: comm syz.2.370: inode #1: comm syz.2.370: iget: illegal inode # [ 87.472573][ T5012] loop2: lost filesystem error report for type 5 error -117 [ 87.475350][ T5012] EXT4-fs (loop2): no journal found [ 87.483825][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 87.484084][ C0] EXT4-fs (loop2): initial error at time 1780417573: ext4_get_journal_inode:5896 [ 87.484654][ C0] EXT4-fs (loop2): last error at time 1780417573: ext4_get_journal_inode:5896 [ 87.526830][ T5012] EXT4-fs (loop2): can't get journal size [ 87.562828][ T5012] EXT4-fs (loop2): failed to initialize system zone (-22) [ 87.571792][ T5012] EXT4-fs (loop2): mount failed [ 87.781533][ T5015] netlink: 72 bytes leftover after parsing attributes in process `syz.3.371'. [ 87.804637][ T5017] FAULT_INJECTION: forcing a failure. [ 87.804637][ T5017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.877720][ T5015] netlink: 232 bytes leftover after parsing attributes in process `syz.3.371'. [ 87.918472][ T5017] CPU: 0 UID: 0 PID: 5017 Comm: syz.0.372 Not tainted syzkaller #0 PREEMPT(lazy) [ 87.918525][ T5017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 87.918540][ T5017] Call Trace: [ 87.918575][ T5017] [ 87.918582][ T5017] __dump_stack+0x1d/0x30 [ 87.918613][ T5017] dump_stack_lvl+0x95/0xd0 [ 87.918757][ T5017] dump_stack+0x15/0x1b [ 87.918774][ T5017] should_fail_ex+0x263/0x280 [ 87.918822][ T5017] should_fail+0xb/0x20 [ 87.918837][ T5017] should_fail_usercopy+0x1a/0x20 [ 87.918860][ T5017] _copy_from_user+0x1c/0xb0 [ 87.918887][ T5017] ___sys_sendmsg+0xc1/0x1e0 [ 87.918962][ T5017] __x64_sys_sendmsg+0xd4/0x160 [ 87.919045][ T5017] x64_sys_call+0x194c/0x3020 [ 87.919066][ T5017] do_syscall_64+0x12c/0x3b0 [ 87.919095][ T5017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.919171][ T5017] RIP: 0033:0x7f0a74e1ce59 [ 87.919186][ T5017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.919207][ T5017] RSP: 002b:00007f0a7386f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.919227][ T5017] RAX: ffffffffffffffda RBX: 00007f0a75095fa0 RCX: 00007f0a74e1ce59 [ 87.919240][ T5017] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 87.919251][ T5017] RBP: 00007f0a7386f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.919342][ T5017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.919356][ T5017] R13: 00007f0a75096038 R14: 00007f0a75095fa0 R15: 00007ffd5b0b6d18 [ 87.919377][ T5017] [ 88.090372][ T28] audit: type=1400 audit(1780417573.757:1350): avc: denied { write } for pid=5016 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 88.234315][ T5018] bridge0: port 3(macsec1) entered blocking state [ 88.261388][ T5018] bridge0: port 3(macsec1) entered disabled state [ 88.285722][ T5018] macsec1: entered allmulticast mode [ 88.352543][ T5018] bridge0: entered allmulticast mode [ 88.368283][ T5018] bridge0: entered promiscuous mode [ 88.402102][ T5018] macsec1: left allmulticast mode [ 88.407399][ T5018] bridge0: left allmulticast mode [ 88.418350][ T3383] bridge0: left promiscuous mode [ 88.572117][ T5028] loop3: detected capacity change from 0 to 1764 [ 88.708413][ T5034] netlink: 168 bytes leftover after parsing attributes in process `syz.1.374'. [ 89.565344][ T5047] loop0: detected capacity change from 0 to 512 [ 89.603918][ T5043] loop5: detected capacity change from 0 to 512 [ 89.622329][ T5043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.651288][ T5043] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.660261][ T5047] 9p: Bad value for 'wfdno' [ 89.675468][ T5051] loop3: detected capacity change from 0 to 1764 [ 89.708648][ T28] audit: type=1400 audit(1780417575.547:1351): avc: denied { create } for pid=5046 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 89.718649][ T3680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.747167][ T28] audit: type=1400 audit(1780417575.577:1352): avc: denied { sys_admin } for pid=5046 comm="syz.0.381" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 89.814026][ T5047] SELinux: Context system_u:object_r:random_device_t:s0 is not valid (left unmapped). [ 89.910481][ T28] audit: type=1400 audit(1780417575.747:1353): avc: denied { relabelto } for pid=5046 comm="syz.0.381" name="bus" dev="tmpfs" ino=376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:random_device_t:s0" [ 90.430379][ T28] audit: type=1400 audit(1780417575.747:1354): avc: denied { associate } for pid=5046 comm="syz.0.381" name="bus" dev="tmpfs" ino=376 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:random_device_t:s0" [ 90.479935][ T5063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'. [ 90.682764][ T28] audit: type=1400 audit(1780417576.517:1355): avc: denied { read write } for pid=5071 comm="syz.3.389" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 90.732225][ T28] audit: type=1400 audit(1780417576.517:1356): avc: denied { open } for pid=5071 comm="syz.3.389" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 90.993660][ T5076] loop2: detected capacity change from 0 to 1024 [ 91.018097][ T5076] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 91.031229][ T5076] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 91.044726][ T5076] EXT4-fs error (device loop2): ext4_get_journal_inode:5896: comm syz.2.388: inode #1: comm syz.2.388: iget: illegal inode # [ 91.059759][ T5076] loop2: lost filesystem error report for type 5 error -117 [ 91.067781][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 91.081667][ C0] EXT4-fs (loop2): initial error at time 1780417576: ext4_get_journal_inode:5896 [ 91.090834][ C0] EXT4-fs (loop2): last error at time 1780417576: ext4_get_journal_inode:5896 [ 91.105644][ T5076] EXT4-fs (loop2): no journal found [ 91.112356][ T5076] EXT4-fs (loop2): can't get journal size [ 91.137401][ T5076] EXT4-fs (loop2): failed to initialize system zone (-22) [ 91.146779][ T5076] EXT4-fs (loop2): mount failed [ 91.207257][ T28] audit: type=1400 audit(1780417577.027:1357): avc: denied { setattr } for pid=5074 comm="syz.3.390" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 91.319571][ T5031] loop1: detected capacity change from 0 to 512 [ 91.472217][ T5031] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 91.552711][ T5057] loop5: detected capacity change from 0 to 512 [ 91.855591][ T5057] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 91.979441][ T5087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.392'. [ 92.101834][ T5057] netlink: 277 bytes leftover after parsing attributes in process `syz.5.384'. [ 92.196293][ T5093] loop3: detected capacity change from 0 to 1764 [ 93.322456][ T5115] loop1: detected capacity change from 0 to 1764 [ 93.383286][ T5121] netlink: 4 bytes leftover after parsing attributes in process `syz.5.403'. [ 93.395343][ T5125] netlink: 40 bytes leftover after parsing attributes in process `syz.3.404'. [ 93.578573][ T5134] FAULT_INJECTION: forcing a failure. [ 93.578573][ T5134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.921970][ T5134] CPU: 0 UID: 0 PID: 5134 Comm: syz.3.408 Not tainted syzkaller #0 PREEMPT(lazy) [ 93.922004][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 93.922018][ T5134] Call Trace: [ 93.922025][ T5134] [ 93.922067][ T5134] __dump_stack+0x1d/0x30 [ 93.922173][ T5134] dump_stack_lvl+0x95/0xd0 [ 93.922197][ T5134] dump_stack+0x15/0x1b [ 93.922218][ T5134] should_fail_ex+0x263/0x280 [ 93.922242][ T5134] should_fail+0xb/0x20 [ 93.922262][ T5134] should_fail_usercopy+0x1a/0x20 [ 93.922316][ T5134] _copy_from_user+0x1c/0xb0 [ 93.922431][ T5134] __sys_bpf+0x183/0x7e0 [ 93.922465][ T5134] __x64_sys_bpf+0x41/0x50 [ 93.922484][ T5134] x64_sys_call+0x10cb/0x3020 [ 93.922506][ T5134] do_syscall_64+0x12c/0x3b0 [ 93.922594][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.922694][ T5134] RIP: 0033:0x7f50836fce59 [ 93.922725][ T5134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.922775][ T5134] RSP: 002b:00007f5082157028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.922804][ T5134] RAX: ffffffffffffffda RBX: 00007f5083975fa0 RCX: 00007f50836fce59 [ 93.922820][ T5134] RDX: 0000000000000019 RSI: 0000200000000540 RDI: 000000000000001c [ 93.922835][ T5134] RBP: 00007f5082157090 R08: 0000000000000000 R09: 0000000000000000 [ 93.922849][ T5134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.922863][ T5134] R13: 00007f5083976038 R14: 00007f5083975fa0 R15: 00007ffc18e3c978 [ 93.922960][ T5134] [ 94.091566][ T5117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'. [ 94.115416][ T5138] loop2: detected capacity change from 0 to 1024 [ 94.123922][ T5138] EXT4-fs: test_dummy_encryption option not supported [ 94.133119][ T5117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'. [ 94.149385][ T28] audit: type=1400 audit(1780417579.947:1358): avc: denied { read } for pid=5137 comm="syz.2.409" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 94.219320][ T28] audit: type=1400 audit(1780417579.947:1359): avc: denied { open } for pid=5137 comm="syz.2.409" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 94.286416][ T28] audit: type=1400 audit(1780417580.117:1360): avc: denied { connect } for pid=5139 comm="syz.3.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.444649][ T5155] FAULT_INJECTION: forcing a failure. [ 94.444649][ T5155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.462973][ T5155] CPU: 0 UID: 0 PID: 5155 Comm: syz.5.415 Not tainted syzkaller #0 PREEMPT(lazy) [ 94.463003][ T5155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 94.463032][ T5155] Call Trace: [ 94.463038][ T5155] [ 94.463045][ T5155] __dump_stack+0x1d/0x30 [ 94.463071][ T5155] dump_stack_lvl+0x95/0xd0 [ 94.463092][ T5155] dump_stack+0x15/0x1b [ 94.463114][ T5155] should_fail_ex+0x263/0x280 [ 94.463137][ T5155] should_fail+0xb/0x20 [ 94.463196][ T5155] should_fail_usercopy+0x1a/0x20 [ 94.463216][ T5155] _copy_to_user+0x20/0xa0 [ 94.463243][ T5155] simple_read_from_buffer+0xb5/0x130 [ 94.463280][ T5155] proc_fail_nth_read+0x10e/0x150 [ 94.463311][ T5155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.463347][ T5155] vfs_read+0x1ab/0x7f0 [ 94.463448][ T5155] ? __rcu_read_unlock+0x4e/0x70 [ 94.463500][ T5155] ? __rcu_read_unlock+0x4e/0x70 [ 94.463519][ T5155] ? __fget_files+0x184/0x1c0 [ 94.463536][ T5155] ? mutex_lock+0x57/0x90 [ 94.463610][ T5155] ksys_read+0xdc/0x1a0 [ 94.463640][ T5155] __x64_sys_read+0x40/0x50 [ 94.463718][ T5155] x64_sys_call+0x2886/0x3020 [ 94.463740][ T5155] do_syscall_64+0x12c/0x3b0 [ 94.463833][ T5155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.463857][ T5155] RIP: 0033:0x7f7995c5d68e [ 94.463873][ T5155] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 94.463889][ T5155] RSP: 002b:00007f79946f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.463911][ T5155] RAX: ffffffffffffffda RBX: 00007f79946f76c0 RCX: 00007f7995c5d68e [ 94.463995][ T5155] RDX: 000000000000000f RSI: 00007f79946f70a0 RDI: 0000000000000003 [ 94.464009][ T5155] RBP: 00007f79946f7090 R08: 0000000000000000 R09: 0000000000000000 [ 94.464021][ T5155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.464061][ T5155] R13: 00007f7995f16038 R14: 00007f7995f15fa0 R15: 00007fffe8286a78 [ 94.464079][ T5155] [ 94.671479][ T5160] netlink: 40 bytes leftover after parsing attributes in process `syz.1.417'. [ 94.707151][ T5157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 94.743468][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 94.743483][ T28] audit: type=1326 audit(1780417580.577:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5163 comm="syz.5.418" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7995c9ce59 code=0x0 [ 94.776054][ T28] audit: type=1326 audit(1780417580.577:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5163 comm="syz.5.418" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7995c9ce59 code=0x0 [ 94.842142][ T5172] loop5: detected capacity change from 0 to 512 [ 94.863363][ T28] audit: type=1400 audit(1780417580.697:1393): avc: denied { write } for pid=5174 comm="syz.0.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.901886][ T28] audit: type=1400 audit(1780417580.717:1394): avc: denied { read } for pid=5174 comm="syz.0.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.902997][ T5172] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.930776][ T28] audit: type=1400 audit(1780417580.717:1395): avc: denied { setopt } for pid=5174 comm="syz.0.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.963340][ T5172] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.079974][ T28] audit: type=1400 audit(1780417580.917:1396): avc: denied { bind } for pid=5188 comm="syz.0.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 95.100812][ T3680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.120711][ T28] audit: type=1400 audit(1780417580.937:1397): avc: denied { listen } for pid=5188 comm="syz.0.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 95.179682][ T5192] netlink: 40 bytes leftover after parsing attributes in process `syz.5.429'. [ 95.310442][ T5203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 95.363992][ T5209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.433'. [ 95.373920][ T5203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 95.435635][ T28] audit: type=1400 audit(1780417581.267:1398): avc: denied { mount } for pid=5211 comm="syz.0.434" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 95.513652][ T28] audit: type=1400 audit(1780417581.297:1399): avc: denied { search } for pid=5211 comm="syz.0.434" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 95.933133][ T5220] Failed to initialize the IGMP autojoin socket (err -2) [ 95.980167][ T5212] loop0: detected capacity change from 0 to 128 [ 96.007195][ T5222] loop3: detected capacity change from 0 to 256 [ 96.099683][ T28] audit: type=1400 audit(1780417581.297:1400): avc: denied { append } for pid=5213 comm="syz.1.435" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 96.354271][ T5230] loop3: detected capacity change from 0 to 512 [ 96.374422][ T5230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.392592][ T5230] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.457037][ T5239] loop2: detected capacity change from 0 to 512 [ 96.494778][ T5233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.517344][ T5233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.530454][ T5239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.543545][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.575173][ T5239] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.348495][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.416084][ T5258] loop2: detected capacity change from 0 to 512 [ 97.473705][ T5258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.486606][ T5262] loop3: detected capacity change from 0 to 1024 [ 97.495344][ T5262] EXT4-fs: Ignoring removed orlov option [ 97.601051][ T5262] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 97.611379][ T5258] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.629326][ T5262] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 97.632482][ T5258] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #2: comm syz.2.443: corrupted inode contents [ 97.637536][ T5262] EXT4-fs (loop3): orphan cleanup on readonly fs [ 97.702438][ T5262] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz.3.441: Invalid inode table block 0 in block_group 0 [ 97.875970][ T5274] loop1: detected capacity change from 0 to 1024 [ 97.904744][ T5274] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 97.918595][ T5274] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 97.931292][ T5274] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: comm syz.1.450: inode #1: comm syz.1.450: iget: illegal inode # [ 97.946036][ T5274] loop1: lost filesystem error report for type 5 error -117 [ 97.955623][ T5274] EXT4-fs (loop1): no journal found [ 97.964323][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 97.964655][ C1] EXT4-fs (loop1): initial error at time 1780417583: ext4_get_journal_inode:5896 [ 97.965174][ C1] EXT4-fs (loop1): last error at time 1780417583: ext4_get_journal_inode:5896 [ 98.005422][ T5274] EXT4-fs (loop1): can't get journal size [ 98.021133][ T5274] EXT4-fs (loop1): failed to initialize system zone (-22) [ 98.031537][ T5274] EXT4-fs (loop1): mount failed [ 98.099064][ T5247] syz.0.445 (5247) used greatest stack depth: 8256 bytes left [ 98.116170][ T5262] loop3: lost filesystem error report for type 5 error -117 [ 98.116429][ T5262] EXT4-fs (loop3): Remounting filesystem read-only [ 98.123806][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 98.123823][ C1] EXT4-fs (loop3): initial error at time 1780417583: __ext4_get_inode_loc:4885 [ 98.123846][ C1] EXT4-fs (loop3): last error at time 1780417583: __ext4_get_inode_loc:4885 [ 98.188148][ T5258] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #2: comm syz.2.443: mark_inode_dirty error [ 98.272721][ T5258] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #2: comm syz.2.443: corrupted inode contents [ 98.372591][ T5278] FAULT_INJECTION: forcing a failure. [ 98.372591][ T5278] name failslab, interval 1, probability 0, space 0, times 0 [ 98.398649][ T5262] EXT4-fs (loop3): 1 truncate cleaned up [ 98.421853][ T5279] __nla_validate_parse: 4 callbacks suppressed [ 98.421877][ T5279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.451'. [ 98.457411][ T5278] CPU: 1 UID: 0 PID: 5278 Comm: syz.0.451 Not tainted syzkaller #0 PREEMPT(lazy) [ 98.457511][ T5278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 98.457531][ T5278] Call Trace: [ 98.457539][ T5278] [ 98.457549][ T5278] __dump_stack+0x1d/0x30 [ 98.457625][ T5278] dump_stack_lvl+0x95/0xd0 [ 98.457647][ T5278] dump_stack+0x15/0x1b [ 98.457674][ T5278] should_fail_ex+0x263/0x280 [ 98.457695][ T5278] should_failslab+0x8c/0xb0 [ 98.457744][ T5278] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 98.457806][ T5278] ? kasprintf+0x83/0xb0 [ 98.457833][ T5278] kvasprintf+0x8a/0x110 [ 98.457921][ T5278] kasprintf+0x83/0xb0 [ 98.458012][ T5278] ? tick_program_event+0x79/0xc0 [ 98.458093][ T5278] logfc+0xda/0x2e0 [ 98.458114][ T5278] ? __rcu_read_unlock+0x4e/0x70 [ 98.458219][ T5278] ? __pfx_test_single_super+0x10/0x10 [ 98.458251][ T5278] sget_fc+0x48b/0x6d0 [ 98.458277][ T5278] ? __pfx_set_anon_super_fc+0x10/0x10 [ 98.458415][ T5278] ? __pfx_debugfs_fill_super+0x10/0x10 [ 98.458449][ T5278] get_tree_single+0x2f/0x100 [ 98.458495][ T5278] debugfs_get_tree+0x25/0x1e0 [ 98.458536][ T5278] vfs_get_tree+0x57/0x1d0 [ 98.458636][ T5278] vfs_cmd_create+0x8a/0x140 [ 98.458664][ T5278] vfs_fsconfig_locked+0x16b/0x210 [ 98.458691][ T5278] __se_sys_fsconfig+0x684/0x7d0 [ 98.458720][ T5278] __x64_sys_fsconfig+0x67/0x80 [ 98.458822][ T5278] x64_sys_call+0xd6e/0x3020 [ 98.458845][ T5278] do_syscall_64+0x12c/0x3b0 [ 98.458943][ T5278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.458965][ T5278] RIP: 0033:0x7f0a74e1ce59 [ 98.458981][ T5278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.459000][ T5278] RSP: 002b:00007f0a7386f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 98.459064][ T5278] RAX: ffffffffffffffda RBX: 00007f0a75095fa0 RCX: 00007f0a74e1ce59 [ 98.459078][ T5278] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 98.459092][ T5278] RBP: 00007f0a7386f090 R08: 0000000000000000 R09: 0000000000000000 [ 98.459107][ T5278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.459121][ T5278] R13: 00007f0a75096038 R14: 00007f0a75095fa0 R15: 00007ffd5b0b6d18 [ 98.459156][ T5278] [ 98.765889][ T5262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.781373][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.829168][ T5281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.453'. [ 98.845631][ T5281] netlink: 28 bytes leftover after parsing attributes in process `syz.5.453'. [ 98.858064][ T5262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.892737][ T5283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 98.907594][ T5283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.452'. [ 99.000581][ T5290] netlink: 40 bytes leftover after parsing attributes in process `syz.2.455'. [ 99.010568][ T5288] loop5: detected capacity change from 0 to 512 [ 99.118869][ T5289] netlink: 168 bytes leftover after parsing attributes in process `syz.0.456'. [ 99.148454][ T5289] loop0: detected capacity change from 0 to 512 [ 99.155177][ T5289] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 99.223345][ T5288] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.260370][ T5288] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.295350][ T5308] loop1: detected capacity change from 0 to 512 [ 99.331859][ T5308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.345078][ T5308] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.381268][ T5308] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.462: corrupted inode contents [ 99.407193][ T5316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.464'. [ 99.421453][ T3680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.422530][ T5308] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #2: comm syz.1.462: mark_inode_dirty error [ 99.451892][ T5308] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.462: corrupted inode contents [ 99.499459][ T5328] netlink: 40 bytes leftover after parsing attributes in process `syz.0.468'. [ 99.546326][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.555390][ T5333] loop0: detected capacity change from 0 to 512 [ 99.609356][ T5333] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 99.617009][ T5333] FAT-fs (loop0): Filesystem has been set read-only [ 99.835795][ T5344] loop1: detected capacity change from 0 to 512 [ 99.846586][ T5344] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 99.875450][ T5344] EXT4-fs (loop1): 1 truncate cleaned up [ 99.883832][ T5344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.943177][ T5349] loop2: detected capacity change from 0 to 512 [ 100.103048][ T5350] loop5: detected capacity change from 0 to 1024 [ 100.127989][ T5350] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 100.140321][ T5350] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 100.153598][ T5350] EXT4-fs error (device loop5): ext4_get_journal_inode:5896: comm syz.5.473: inode #1: comm syz.5.473: iget: illegal inode # [ 100.167278][ T5350] loop5: lost filesystem error report for type 5 error -117 [ 100.167801][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 100.182841][ C0] EXT4-fs (loop5): initial error at time 1780417586: ext4_get_journal_inode:5896 [ 100.192961][ C0] EXT4-fs (loop5): last error at time 1780417586: ext4_get_journal_inode:5896 [ 100.209519][ T5350] EXT4-fs (loop5): no journal found [ 100.216157][ T5350] EXT4-fs (loop5): can't get journal size [ 100.237087][ T5350] EXT4-fs (loop5): failed to initialize system zone (-22) [ 100.246088][ T5350] EXT4-fs (loop5): mount failed [ 100.416332][ T5349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.495170][ T5356] netlink: 'syz.0.477': attribute type 10 has an invalid length. [ 100.540124][ T5349] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.698079][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.760611][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.815289][ T5364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 101.081822][ T5371] loop1: detected capacity change from 0 to 512 [ 101.089354][ T5371] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 101.098426][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 101.098443][ T28] audit: type=1400 audit(1780417586.937:1421): avc: denied { getopt } for pid=5369 comm="syz.0.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.600319][ T11] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 101.628170][ T11] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 101.671305][ T5390] loop2: detected capacity change from 0 to 1764 [ 101.716353][ T5388] loop1: detected capacity change from 0 to 4096 [ 101.731495][ T5388] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 101.762665][ T5396] loop3: detected capacity change from 0 to 512 [ 101.917025][ T5396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.942440][ T5385] Failed to initialize the IGMP autojoin socket (err -2) [ 101.996259][ T5396] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.038221][ T5405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.048419][ T5405] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.062468][ T5405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.076371][ T5405] wireguard: wg0: Could not create IPv4 socket [ 102.082619][ T5405] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 102.482157][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.521099][ T28] audit: type=1400 audit(1780417588.357:1422): avc: denied { mounton } for pid=5406 comm="syz.1.494" path="/93/file1" dev="tmpfs" ino=515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 102.702015][ T5412] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 102.875127][ T5426] FAULT_INJECTION: forcing a failure. [ 102.875127][ T5426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.892328][ T5435] usb usb8: usbfs: process 5435 (syz.5.503) did not claim interface 0 before use [ 102.902349][ T5426] CPU: 0 UID: 0 PID: 5426 Comm: syz.0.500 Not tainted syzkaller #0 PREEMPT(lazy) [ 102.902375][ T5426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 102.902387][ T5426] Call Trace: [ 102.902394][ T5426] [ 102.902402][ T5426] __dump_stack+0x1d/0x30 [ 102.902430][ T5426] dump_stack_lvl+0x95/0xd0 [ 102.902485][ T5426] dump_stack+0x15/0x1b [ 102.902507][ T5426] should_fail_ex+0x263/0x280 [ 102.902531][ T5426] should_fail+0xb/0x20 [ 102.902549][ T5426] should_fail_usercopy+0x1a/0x20 [ 102.902600][ T5426] _copy_to_user+0x20/0xa0 [ 102.902652][ T5426] simple_read_from_buffer+0xb5/0x130 [ 102.902700][ T5426] proc_fail_nth_read+0x10e/0x150 [ 102.902791][ T5426] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.902824][ T5426] vfs_read+0x1ab/0x7f0 [ 102.902924][ T5426] ? mutex_lock+0x35/0x90 [ 102.902947][ T5426] ? __tsan_unaligned_write8+0x12/0x180 [ 102.902975][ T5426] ? mutex_lock+0x57/0x90 [ 102.903003][ T5426] ksys_read+0xdc/0x1a0 [ 102.903077][ T5426] __x64_sys_read+0x40/0x50 [ 102.903108][ T5426] x64_sys_call+0x2886/0x3020 [ 102.903176][ T5426] do_syscall_64+0x12c/0x3b0 [ 102.903206][ T5426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.903291][ T5426] RIP: 0033:0x7f0a74ddd68e [ 102.903308][ T5426] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.903409][ T5426] RSP: 002b:00007f0a7386efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.903429][ T5426] RAX: ffffffffffffffda RBX: 00007f0a7386f6c0 RCX: 00007f0a74ddd68e [ 102.903442][ T5426] RDX: 000000000000000f RSI: 00007f0a7386f0a0 RDI: 0000000000000005 [ 102.903454][ T5426] RBP: 00007f0a7386f090 R08: 0000000000000000 R09: 0000000000000000 [ 102.903467][ T5426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.903502][ T5426] R13: 00007f0a75096038 R14: 00007f0a75095fa0 R15: 00007ffd5b0b6d18 [ 102.903520][ T5426] [ 102.918017][ T5428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 103.035039][ T5438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.048364][ T5428] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.124435][ T5438] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.248429][ T5441] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 103.259332][ T5441] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 103.269456][ T5441] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: comm syz.3.502: inode #1: comm syz.3.502: iget: illegal inode # [ 103.282408][ T5441] loop3: lost filesystem error report for type 5 error -117 [ 103.282874][ T5441] EXT4-fs (loop3): no journal found [ 103.295382][ T5441] EXT4-fs (loop3): can't get journal size [ 103.302106][ T5441] EXT4-fs (loop3): failed to initialize system zone (-22) [ 103.309243][ T5441] EXT4-fs (loop3): mount failed [ 103.363627][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.481589][ T5451] usb usb8: usbfs: process 5451 (syz.1.507) did not claim interface 0 before use [ 103.499268][ T5451] FAULT_INJECTION: forcing a failure. [ 103.499268][ T5451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.527888][ T5451] CPU: 1 UID: 0 PID: 5451 Comm: syz.1.507 Not tainted syzkaller #0 PREEMPT(lazy) [ 103.527980][ T5451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 103.527993][ T5451] Call Trace: [ 103.528000][ T5451] [ 103.528009][ T5451] __dump_stack+0x1d/0x30 [ 103.528037][ T5451] dump_stack_lvl+0x95/0xd0 [ 103.528058][ T5451] dump_stack+0x15/0x1b [ 103.528079][ T5451] should_fail_ex+0x263/0x280 [ 103.528117][ T5451] should_fail+0xb/0x20 [ 103.528133][ T5451] should_fail_usercopy+0x1a/0x20 [ 103.528153][ T5451] _copy_to_user+0x20/0xa0 [ 103.528176][ T5451] simple_read_from_buffer+0xb5/0x130 [ 103.528270][ T5451] proc_fail_nth_read+0x10e/0x150 [ 103.528303][ T5451] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.528361][ T5451] vfs_read+0x1ab/0x7f0 [ 103.528385][ T5451] ? __rcu_read_unlock+0x4e/0x70 [ 103.528407][ T5451] ? __fget_files+0x184/0x1c0 [ 103.528429][ T5451] ? mutex_lock+0x57/0x90 [ 103.528515][ T5451] ksys_read+0xdc/0x1a0 [ 103.528550][ T5451] __x64_sys_read+0x40/0x50 [ 103.528626][ T5451] x64_sys_call+0x2886/0x3020 [ 103.528686][ T5451] do_syscall_64+0x12c/0x3b0 [ 103.528724][ T5451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.528749][ T5451] RIP: 0033:0x7f73cc7bd68e [ 103.528768][ T5451] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.528794][ T5451] RSP: 002b:00007f73cb22dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.528818][ T5451] RAX: ffffffffffffffda RBX: 00007f73cb22e6c0 RCX: 00007f73cc7bd68e [ 103.528849][ T5451] RDX: 000000000000000f RSI: 00007f73cb22e0a0 RDI: 0000000000000005 [ 103.528911][ T5451] RBP: 00007f73cb22e090 R08: 0000000000000000 R09: 0000000000000000 [ 103.528925][ T5451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.528940][ T5451] R13: 00007f73cca76128 R14: 00007f73cca76090 R15: 00007ffd10c1f4d8 [ 103.528960][ T5451] [ 104.111968][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 104.217319][ T5453] usb usb8: usbfs: process 5453 (syz.0.505) did not claim interface 0 before use [ 104.294880][ T5461] __nla_validate_parse: 6 callbacks suppressed [ 104.294898][ T5461] netlink: 168 bytes leftover after parsing attributes in process `syz.5.509'. [ 104.317188][ T5461] set_capacity_and_notify: 4 callbacks suppressed [ 104.317207][ T5461] loop5: detected capacity change from 0 to 512 [ 104.409140][ T5472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 104.421270][ T5461] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 104.495724][ T5474] loop5: detected capacity change from 0 to 512 [ 104.522296][ T5474] FAULT_INJECTION: forcing a failure. [ 104.522296][ T5474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.535374][ T5474] CPU: 1 UID: 0 PID: 5474 Comm: syz.5.515 Not tainted syzkaller #0 PREEMPT(lazy) [ 104.535403][ T5474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 104.535417][ T5474] Call Trace: [ 104.535426][ T5474] [ 104.535435][ T5474] __dump_stack+0x1d/0x30 [ 104.535463][ T5474] dump_stack_lvl+0x95/0xd0 [ 104.535540][ T5474] dump_stack+0x15/0x1b [ 104.535557][ T5474] should_fail_ex+0x263/0x280 [ 104.535581][ T5474] should_fail+0xb/0x20 [ 104.535658][ T5474] should_fail_usercopy+0x1a/0x20 [ 104.535680][ T5474] strncpy_from_user+0x27/0x250 [ 104.535730][ T5474] ? __kmalloc_cache_noprof+0x18a/0x400 [ 104.535761][ T5474] getname_long+0x66/0x100 [ 104.535788][ T5474] do_getname+0x12e/0x1c0 [ 104.535817][ T5474] __se_sys_symlinkat+0x23/0x1b0 [ 104.535854][ T5474] __x64_sys_symlinkat+0x43/0x50 [ 104.535891][ T5474] x64_sys_call+0x2b7d/0x3020 [ 104.535961][ T5474] do_syscall_64+0x12c/0x3b0 [ 104.535996][ T5474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.536019][ T5474] RIP: 0033:0x7f7995c9ce59 [ 104.536034][ T5474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.536049][ T5474] RSP: 002b:00007f79946f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 104.536111][ T5474] RAX: ffffffffffffffda RBX: 00007f7995f15fa0 RCX: 00007f7995c9ce59 [ 104.536127][ T5474] RDX: 0000200000000000 RSI: ffffffffffffff9c RDI: 0000200000001040 [ 104.536143][ T5474] RBP: 00007f79946f7090 R08: 0000000000000000 R09: 0000000000000000 [ 104.536158][ T5474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.536182][ T5474] R13: 00007f7995f16038 R14: 00007f7995f15fa0 R15: 00007fffe8286a78 [ 104.536199][ T5474] [ 104.772355][ T5481] loop2: detected capacity change from 0 to 512 [ 104.798762][ T5485] loop3: detected capacity change from 0 to 512 [ 104.812239][ T5481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.825513][ T5485] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 104.839825][ T5485] FAT-fs (loop3): Filesystem has been set read-only [ 104.847102][ T5481] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.859156][ T5485] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 104.895520][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.945165][ T28] audit: type=1400 audit(1780417590.777:1423): avc: denied { associate } for pid=5494 comm="syz.2.522" name="300" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 104.992340][ T28] audit: type=1400 audit(1780417590.827:1424): avc: denied { ioctl } for pid=5498 comm="syz.1.523" path="socket:[11124]" dev="sockfs" ino=11124 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.999333][ T5497] loop0: detected capacity change from 0 to 512 [ 105.027440][ T5501] netlink: 168 bytes leftover after parsing attributes in process `syz.2.525'. [ 105.049446][ T5501] loop2: detected capacity change from 0 to 512 [ 105.055981][ T5501] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 105.083503][ T28] audit: type=1400 audit(1780417590.917:1425): avc: denied { bind } for pid=5503 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.105774][ T5506] loop2: detected capacity change from 0 to 164 [ 105.122539][ T5493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.521'. [ 105.135520][ T5497] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 105.143276][ T5497] FAT-fs (loop0): Filesystem has been set read-only [ 105.162276][ T5497] FAULT_INJECTION: forcing a failure. [ 105.162276][ T5497] name failslab, interval 1, probability 0, space 0, times 0 [ 105.182386][ T5497] CPU: 0 UID: 0 PID: 5497 Comm: syz.0.524 Not tainted syzkaller #0 PREEMPT(lazy) [ 105.182423][ T5497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 105.182468][ T5497] Call Trace: [ 105.182475][ T5497] [ 105.182488][ T5497] __dump_stack+0x1d/0x30 [ 105.182536][ T5497] dump_stack_lvl+0x95/0xd0 [ 105.182558][ T5497] dump_stack+0x15/0x1b [ 105.182578][ T5497] should_fail_ex+0x263/0x280 [ 105.182600][ T5497] ? __pfx_fat_alloc_inode+0x10/0x10 [ 105.182660][ T5497] should_failslab+0x8c/0xb0 [ 105.182697][ T5497] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 105.182728][ T5497] ? fat_alloc_inode+0x3c/0xe0 [ 105.182791][ T5497] ? fat_get_entry+0xeb/0x5d0 [ 105.182883][ T5497] ? __pfx_fat_alloc_inode+0x10/0x10 [ 105.182911][ T5497] fat_alloc_inode+0x3c/0xe0 [ 105.182938][ T5497] ? __pfx_fat_alloc_inode+0x10/0x10 [ 105.183014][ T5497] alloc_inode+0x40/0x170 [ 105.183041][ T5497] new_inode+0x1d/0xe0 [ 105.183063][ T5497] fat_build_inode+0x169/0x290 [ 105.183151][ T5497] msdos_lookup+0x22d/0x2a0 [ 105.183186][ T5497] __lookup_slow+0x19d/0x260 [ 105.183280][ T5497] lookup_slow+0x3c/0x60 [ 105.183305][ T5497] path_lookupat+0x2f7/0x500 [ 105.183328][ T5497] filename_lookup+0x190/0x390 [ 105.183368][ T5497] path_listxattrat+0xd1/0x2b0 [ 105.183396][ T5497] __x64_sys_listxattr+0x4a/0x60 [ 105.183418][ T5497] x64_sys_call+0x1a59/0x3020 [ 105.183605][ T5497] do_syscall_64+0x12c/0x3b0 [ 105.183636][ T5497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.183715][ T5497] RIP: 0033:0x7f0a74e1ce59 [ 105.183811][ T5497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.183830][ T5497] RSP: 002b:00007f0a7386f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 105.183854][ T5497] RAX: ffffffffffffffda RBX: 00007f0a75095fa0 RCX: 00007f0a74e1ce59 [ 105.183869][ T5497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 105.183883][ T5497] RBP: 00007f0a7386f090 R08: 0000000000000000 R09: 0000000000000000 [ 105.183896][ T5497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.183910][ T5497] R13: 00007f0a75096038 R14: 00007f0a75095fa0 R15: 00007ffd5b0b6d18 [ 105.184020][ T5497] [ 105.422512][ T5511] tmpfs: Too few inodes for current use [ 105.445939][ T28] audit: type=1400 audit(1780417591.267:1426): avc: denied { mounton } for pid=5507 comm="syz.1.528" path="/" dev="tmpfs" ino=552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 105.580009][ T5508] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.804066][ T5523] loop2: detected capacity change from 0 to 1024 [ 106.569470][ T5522] loop1: detected capacity change from 0 to 512 [ 106.729236][ T5523] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 106.745916][ T5523] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 106.762161][ T5523] EXT4-fs error (device loop2): ext4_get_journal_inode:5896: comm syz.2.529: inode #1: comm syz.2.529: iget: illegal inode # [ 106.776643][ T5523] loop2: lost filesystem error report for type 5 error -117 [ 106.778005][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 106.793974][ C0] EXT4-fs (loop2): initial error at time 1780417592: ext4_get_journal_inode:5896 [ 106.804366][ C0] EXT4-fs (loop2): last error at time 1780417592: ext4_get_journal_inode:5896 [ 106.811189][ T5522] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.963218][ T5525] loop0: detected capacity change from 0 to 1764 [ 106.970149][ T5525] iso9660: Unknown parameter 'euid' [ 107.555879][ T5522] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.748171][ T5523] EXT4-fs (loop2): no journal found [ 107.754154][ T5523] EXT4-fs (loop2): can't get journal size [ 107.942790][ T5523] EXT4-fs (loop2): failed to initialize system zone (-22) [ 107.955523][ T5523] EXT4-fs (loop2): mount failed [ 109.512859][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.574600][ T5540] loop2: detected capacity change from 0 to 512 [ 110.310332][ T5548] loop1: detected capacity change from 0 to 1764 [ 110.317189][ T5548] iso9660: Unknown parameter 'euid' [ 110.338780][ T5547] loop3: detected capacity change from 0 to 1764 [ 110.345686][ T5547] iso9660: Unknown parameter 'euid' [ 110.773204][ T5540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.799346][ T28] audit: type=1400 audit(1780417596.317:1427): avc: denied { firmware_load } for pid=5541 comm="syz.3.539" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 110.835607][ T5540] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.874312][ T28] audit: type=1400 audit(1780417596.697:1428): avc: denied { getopt } for pid=5539 comm="syz.2.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.938379][ T5540] netlink: 'syz.2.538': attribute type 21 has an invalid length. [ 110.961398][ T28] audit: type=1400 audit(1780417596.697:1429): avc: denied { write } for pid=5539 comm="syz.2.538" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.067454][ T5568] loop5: detected capacity change from 0 to 512 [ 111.088164][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.119054][ T5570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5570 comm=syz.3.547 [ 111.144222][ T5568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.187671][ T5570] netlink: 340 bytes leftover after parsing attributes in process `syz.3.547'. [ 111.262956][ T5577] loop2: detected capacity change from 0 to 1764 [ 111.540250][ T28] audit: type=1400 audit(1780417597.057:1430): avc: denied { mounton } for pid=5563 comm="syz.1.544" path="/105/file0" dev="tmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.639575][ T5583] wireguard: wg0: Could not create IPv4 socket [ 111.645909][ T5583] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 111.772860][ T5568] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.310966][ T28] audit: type=1400 audit(1780417598.147:1431): avc: denied { unlink } for pid=3298 comm="syz-executor" name="file1" dev="tmpfs" ino=568 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 112.389598][ T3680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.457946][ T5591] netlink: 'syz.3.551': attribute type 4 has an invalid length. [ 112.540410][ T28] audit: type=1400 audit(1780417598.367:1432): avc: denied { write } for pid=5594 comm="syz.5.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 112.580283][ T5600] loop2: detected capacity change from 0 to 512 [ 112.612450][ T5600] EXT4-fs: Ignoring removed bh option [ 112.644804][ T5600] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 112.655392][ T5600] EXT4-fs (loop2): 1 truncate cleaned up [ 112.678262][ T5600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.844766][ T28] audit: type=1400 audit(1780417598.677:1433): avc: denied { setopt } for pid=5612 comm="syz.5.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.949643][ T28] audit: type=1400 audit(1780417598.787:1434): avc: denied { read } for pid=5612 comm="syz.5.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.107814][ T5617] FAULT_INJECTION: forcing a failure. [ 113.107814][ T5617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.121071][ T5617] CPU: 1 UID: 0 PID: 5617 Comm: syz.5.561 Not tainted syzkaller #0 PREEMPT(lazy) [ 113.121109][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 113.121122][ T5617] Call Trace: [ 113.121130][ T5617] [ 113.121140][ T5617] __dump_stack+0x1d/0x30 [ 113.121236][ T5617] dump_stack_lvl+0x95/0xd0 [ 113.121258][ T5617] dump_stack+0x15/0x1b [ 113.121328][ T5617] should_fail_ex+0x263/0x280 [ 113.121347][ T5617] should_fail+0xb/0x20 [ 113.121381][ T5617] should_fail_usercopy+0x1a/0x20 [ 113.121403][ T5617] strncpy_from_user+0x27/0x250 [ 113.121432][ T5617] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 113.121498][ T5617] do_getname+0x59/0x1c0 [ 113.121517][ T5617] __se_sys_renameat2+0x29/0x1c0 [ 113.121584][ T5617] __x64_sys_renameat2+0x67/0x80 [ 113.121608][ T5617] x64_sys_call+0x2a12/0x3020 [ 113.121634][ T5617] do_syscall_64+0x12c/0x3b0 [ 113.121672][ T5617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.121755][ T5617] RIP: 0033:0x7f7995c9ce59 [ 113.121773][ T5617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.121793][ T5617] RSP: 002b:00007f79946f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 113.121842][ T5617] RAX: ffffffffffffffda RBX: 00007f7995f15fa0 RCX: 00007f7995c9ce59 [ 113.121858][ T5617] RDX: ffffffffffffff9c RSI: 00002000000007c0 RDI: ffffffffffffff9c [ 113.121872][ T5617] RBP: 00007f79946f7090 R08: 0000000000000004 R09: 0000000000000000 [ 113.121887][ T5617] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 113.121902][ T5617] R13: 00007f7995f16038 R14: 00007f7995f15fa0 R15: 00007fffe8286a78 [ 113.121976][ T5617] [ 113.413158][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.452573][ T5622] loop3: detected capacity change from 0 to 512 [ 113.475825][ T5624] loop2: detected capacity change from 0 to 1024 [ 113.697394][ T5624] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.560: bad orphan inode 204996608 [ 113.709201][ T5622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.723001][ T5622] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.734066][ T5624] loop2: lost filesystem error report for type 5 error -117 [ 113.738571][ T5624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 113.830460][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.008480][ T5624] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.081025][ T28] audit: type=1400 audit(1780417599.907:1435): avc: denied { write } for pid=5623 comm="syz.2.560" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.102784][ T28] audit: type=1400 audit(1780417599.917:1436): avc: denied { write } for pid=5623 comm="syz.2.560" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.180366][ T5636] FAULT_INJECTION: forcing a failure. [ 114.180366][ T5636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.193487][ T5636] CPU: 1 UID: 0 PID: 5636 Comm: syz.0.565 Not tainted syzkaller #0 PREEMPT(lazy) [ 114.193518][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 114.193530][ T5636] Call Trace: [ 114.193536][ T5636] [ 114.193614][ T5636] __dump_stack+0x1d/0x30 [ 114.193683][ T5636] dump_stack_lvl+0x95/0xd0 [ 114.193703][ T5636] dump_stack+0x15/0x1b [ 114.193723][ T5636] should_fail_ex+0x263/0x280 [ 114.193747][ T5636] should_fail+0xb/0x20 [ 114.193831][ T5636] should_fail_usercopy+0x1a/0x20 [ 114.193856][ T5636] _copy_from_user+0x1c/0xb0 [ 114.193935][ T5636] __sys_bpf+0x183/0x7e0 [ 114.193966][ T5636] __x64_sys_bpf+0x41/0x50 [ 114.193987][ T5636] x64_sys_call+0x10cb/0x3020 [ 114.194016][ T5636] do_syscall_64+0x12c/0x3b0 [ 114.194169][ T5636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.194193][ T5636] RIP: 0033:0x7f0a74e1ce59 [ 114.194208][ T5636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.194289][ T5636] RSP: 002b:00007f0a7382d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.194365][ T5636] RAX: ffffffffffffffda RBX: 00007f0a75096180 RCX: 00007f0a74e1ce59 [ 114.194382][ T5636] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000002 [ 114.194396][ T5636] RBP: 00007f0a7382d090 R08: 0000000000000000 R09: 0000000000000000 [ 114.194409][ T5636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.194469][ T5636] R13: 00007f0a75096218 R14: 00007f0a75096180 R15: 00007ffd5b0b6d18 [ 114.194490][ T5636] [ 114.425665][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 114.500542][ T5641] netlink: 'syz.3.564': attribute type 13 has an invalid length. [ 114.554481][ T5642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.563105][ T5642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.886682][ T5651] loop2: detected capacity change from 0 to 128 [ 115.056759][ T5659] loop0: detected capacity change from 0 to 512 [ 115.064052][ T5659] EXT4-fs: Ignoring removed bh option [ 115.119099][ T5665] loop1: detected capacity change from 0 to 512 [ 115.127300][ T5659] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 115.144642][ T5659] EXT4-fs (loop0): 1 truncate cleaned up [ 115.150694][ T5659] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.154538][ T5665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.191493][ T5665] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.217568][ T5672] loop2: detected capacity change from 0 to 1764 [ 115.219024][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.241297][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.416134][ T5680] loop1: detected capacity change from 0 to 128 [ 115.440566][ T5680] FAULT_INJECTION: forcing a failure. [ 115.440566][ T5680] name failslab, interval 1, probability 0, space 0, times 0 [ 115.461076][ T5680] CPU: 1 UID: 0 PID: 5680 Comm: syz.1.579 Not tainted syzkaller #0 PREEMPT(lazy) [ 115.461103][ T5680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 115.461116][ T5680] Call Trace: [ 115.461143][ T5680] [ 115.461153][ T5680] __dump_stack+0x1d/0x30 [ 115.461176][ T5680] dump_stack_lvl+0x95/0xd0 [ 115.461230][ T5680] dump_stack+0x15/0x1b [ 115.461266][ T5680] should_fail_ex+0x263/0x280 [ 115.461289][ T5680] ? vfat_add_entry+0xc6/0x2280 [ 115.461319][ T5680] should_failslab+0x8c/0xb0 [ 115.461387][ T5680] __kmalloc_cache_noprof+0x5f/0x400 [ 115.461428][ T5680] vfat_add_entry+0xc6/0x2280 [ 115.461453][ T5680] ? finish_task_switch+0x128/0x320 [ 115.461477][ T5680] ? __schedule+0x951/0xd40 [ 115.461501][ T5680] ? ktime_get_coarse_real_ts64_mg+0x187/0x1a0 [ 115.461609][ T5680] ? current_time+0x188/0x240 [ 115.461638][ T5680] vfat_rename2+0x81d/0x13f0 [ 115.461675][ T5680] ? __pfx_vfat_rename2+0x10/0x10 [ 115.461742][ T5680] vfs_rename+0x97f/0xad0 [ 115.461868][ T5680] filename_renameat2+0x3b6/0x6e0 [ 115.461944][ T5680] __se_sys_renameat2+0x4f/0x1c0 [ 115.461968][ T5680] __x64_sys_renameat2+0x67/0x80 [ 115.461990][ T5680] x64_sys_call+0x2a12/0x3020 [ 115.462016][ T5680] do_syscall_64+0x12c/0x3b0 [ 115.462140][ T5680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.462171][ T5680] RIP: 0033:0x7f73cc7fce59 [ 115.462186][ T5680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.462204][ T5680] RSP: 002b:00007f73cb24f028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 115.462224][ T5680] RAX: ffffffffffffffda RBX: 00007f73cca75fa0 RCX: 00007f73cc7fce59 [ 115.462237][ T5680] RDX: ffffffffffffff9c RSI: 0000200000000000 RDI: ffffffffffffff9c [ 115.462250][ T5680] RBP: 00007f73cb24f090 R08: 0000000000000000 R09: 0000000000000000 [ 115.462262][ T5680] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 115.462314][ T5680] R13: 00007f73cca76038 R14: 00007f73cca75fa0 R15: 00007ffd10c1f4d8 [ 115.462333][ T5680] [ 115.687510][ T5686] wireguard: wg0: Could not create IPv4 socket [ 115.693820][ T5686] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 115.916991][ T5698] loop1: detected capacity change from 0 to 764 [ 116.052198][ T5700] FAULT_INJECTION: forcing a failure. [ 116.052198][ T5700] name failslab, interval 1, probability 0, space 0, times 0 [ 116.064871][ T5700] CPU: 1 UID: 0 PID: 5700 Comm: syz.0.587 Not tainted syzkaller #0 PREEMPT(lazy) [ 116.064919][ T5700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 116.064933][ T5700] Call Trace: [ 116.064941][ T5700] [ 116.064951][ T5700] __dump_stack+0x1d/0x30 [ 116.064979][ T5700] dump_stack_lvl+0x95/0xd0 [ 116.065003][ T5700] dump_stack+0x15/0x1b [ 116.065023][ T5700] should_fail_ex+0x263/0x280 [ 116.065194][ T5700] ? rtnl_newlink+0x5c/0x1400 [ 116.065225][ T5700] should_failslab+0x8c/0xb0 [ 116.065251][ T5700] __kmalloc_cache_noprof+0x5f/0x400 [ 116.065316][ T5700] ? __pfx_rtnl_newlink+0x10/0x10 [ 116.065348][ T5700] rtnl_newlink+0x5c/0x1400 [ 116.065395][ T5700] ? __siphash_unaligned+0x197/0x2e0 [ 116.065469][ T5700] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 116.065610][ T5700] ? __rcu_read_unlock+0x4e/0x70 [ 116.065630][ T5700] ? avc_has_perm_noaudit+0xab/0x130 [ 116.065699][ T5700] ? cred_has_capability+0x224/0x2a0 [ 116.065729][ T5700] ? selinux_capable+0x31/0x40 [ 116.065796][ T5700] ? security_capable+0x7b/0x90 [ 116.065820][ T5700] ? ns_capable+0x7c/0xb0 [ 116.065854][ T5700] ? __pfx_rtnl_newlink+0x10/0x10 [ 116.065967][ T5700] rtnetlink_rcv_msg+0x64b/0x720 [ 116.066079][ T5700] netlink_rcv_skb+0x123/0x220 [ 116.066112][ T5700] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 116.066146][ T5700] rtnetlink_rcv+0x1c/0x30 [ 116.066235][ T5700] netlink_unicast+0x5a8/0x680 [ 116.066268][ T5700] netlink_sendmsg+0x5c8/0x6f0 [ 116.066295][ T5700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.066326][ T5700] ____sys_sendmsg+0x563/0x5b0 [ 116.066353][ T5700] ___sys_sendmsg+0x195/0x1e0 [ 116.066443][ T5700] __x64_sys_sendmsg+0xd4/0x160 [ 116.066529][ T5700] x64_sys_call+0x194c/0x3020 [ 116.066550][ T5700] do_syscall_64+0x12c/0x3b0 [ 116.066665][ T5700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.066721][ T5700] RIP: 0033:0x7f0a74e1ce59 [ 116.066769][ T5700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.066791][ T5700] RSP: 002b:00007f0a7386f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.066813][ T5700] RAX: ffffffffffffffda RBX: 00007f0a75095fa0 RCX: 00007f0a74e1ce59 [ 116.066830][ T5700] RDX: 0000000004004000 RSI: 0000200000000140 RDI: 0000000000000006 [ 116.066846][ T5700] RBP: 00007f0a7386f090 R08: 0000000000000000 R09: 0000000000000000 [ 116.066936][ T5700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.066951][ T5700] R13: 00007f0a75096038 R14: 00007f0a75095fa0 R15: 00007ffd5b0b6d18 [ 116.066971][ T5700] [ 116.073161][ T5704] loop3: detected capacity change from 0 to 512 [ 116.176141][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 116.176157][ T28] audit: type=1326 audit(1780417602.007:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5705 comm="syz.0.589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a74e1ce59 code=0x7ffc0000 [ 116.364427][ T5708] loop0: detected capacity change from 0 to 512 [ 116.368893][ T28] audit: type=1326 audit(1780417602.087:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5705 comm="syz.0.589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a74e1ce59 code=0x7ffc0000 [ 116.449640][ T28] audit: type=1326 audit(1780417602.087:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5705 comm="syz.0.589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a74e1ce59 code=0x7ffc0000 [ 116.480282][ T28] audit: type=1326 audit(1780417602.087:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5705 comm="syz.0.589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a74e1ce59 code=0x7ffc0000 [ 116.505627][ T28] audit: type=1326 audit(1780417602.087:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5705 comm="syz.0.589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f0a74e1ce59 code=0x7ffc0000 [ 116.531065][ T28] audit: type=1326 audit(1780417602.087:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5705 comm="syz.0.589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a74e1ce59 code=0x7ffc0000 [ 116.556432][ T28] audit: type=1326 audit(1780417602.087:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5705 comm="syz.0.589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a74e1ce59 code=0x7ffc0000 [ 116.561042][ T5716] netlink: 'syz.1.595': attribute type 39 has an invalid length. [ 116.594831][ T5708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.608722][ T5708] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.636647][ T28] audit: type=1326 audit(1780417602.087:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5705 comm="syz.0.589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0a74e1ce59 code=0x7ffc0000 [ 116.670926][ T28] audit: type=1326 audit(1780417602.087:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5705 comm="syz.0.589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0a74e1ce59 code=0x7ffc0000 [ 116.672170][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.090376][ T5744] loop0: detected capacity change from 0 to 512 [ 117.098917][ T5744] EXT4-fs: Ignoring removed bh option [ 117.120149][ T5744] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 117.173449][ T5744] EXT4-fs (loop0): 1 truncate cleaned up [ 117.200291][ T5744] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.279562][ T5749] loop5: detected capacity change from 0 to 512 [ 117.289728][ T5749] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 117.353818][ T5753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.606'. [ 117.381916][ T5753] netlink: 9 bytes leftover after parsing attributes in process `syz.3.606'. [ 117.450283][ T5755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.487218][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.497289][ T5755] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.508750][ T5749] mmap: syz.5.604 (5749) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 117.542876][ T5762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'. [ 117.557586][ T5762] netlink: 'syz.0.609': attribute type 30 has an invalid length. [ 117.561682][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.577259][ T28] audit: type=1400 audit(1780417603.407:1450): avc: denied { append } for pid=5748 comm="syz.5.604" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 117.602687][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'. [ 117.611767][ T5763] netlink: 'syz.0.609': attribute type 30 has an invalid length. [ 117.634483][ T5767] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 117.635631][ T5766] SELinux: policydb magic number 0x86cc501 does not match expected magic number 0xf97cff8c [ 117.657626][ T5766] SELinux: failed to load policy [ 117.676684][ T5767] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 117.693913][ T5767] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: inode #32: comm syz.1.610: iget: special inode unallocated [ 117.707796][ T5767] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 117.708091][ T5767] EXT4-fs (loop1): no journal found [ 117.722605][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 117.722629][ C1] EXT4-fs (loop1): initial error at time 1780417603: ext4_get_journal_inode:5896: inode 32 [ 117.722671][ C1] EXT4-fs (loop1): last error at time 1780417603: ext4_get_journal_inode:5896: inode 32 [ 117.732359][ T5776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.613'. [ 117.759219][ T5767] EXT4-fs (loop1): can't get journal size [ 117.767580][ T5767] EXT4-fs (loop1): filesystem is read-only [ 117.774502][ T5767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 117.792913][ T5776] dns_resolver: Unsupported content type (152) [ 117.804053][ T5749] netlink: 32 bytes leftover after parsing attributes in process `syz.5.604'. [ 117.825893][ T5749] netlink: 36 bytes leftover after parsing attributes in process `syz.5.604'. [ 117.828470][ T5776] EXT4-fs: test_dummy_encryption option not supported [ 117.844119][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.872525][ T5789] FAULT_INJECTION: forcing a failure. [ 117.872525][ T5789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.872602][ T5789] CPU: 1 UID: 0 PID: 5789 Comm: syz.1.617 Not tainted syzkaller #0 PREEMPT(lazy) [ 117.872629][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 117.872645][ T5789] Call Trace: [ 117.872650][ T5789] [ 117.872657][ T5789] __dump_stack+0x1d/0x30 [ 117.872681][ T5789] dump_stack_lvl+0x95/0xd0 [ 117.872738][ T5789] dump_stack+0x15/0x1b [ 117.872759][ T5789] should_fail_ex+0x263/0x280 [ 117.872783][ T5789] should_fail+0xb/0x20 [ 117.872840][ T5789] should_fail_usercopy+0x1a/0x20 [ 117.872860][ T5789] _copy_from_user+0x1c/0xb0 [ 117.872884][ T5789] __sys_sendto+0x1ca/0x490 [ 117.872946][ T5789] __x64_sys_sendto+0x76/0x90 [ 117.872972][ T5789] x64_sys_call+0x2d35/0x3020 [ 117.873066][ T5789] do_syscall_64+0x12c/0x3b0 [ 117.873098][ T5789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.873122][ T5789] RIP: 0033:0x7f73cc7fce59 [ 117.873139][ T5789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.873200][ T5789] RSP: 002b:00007f73cb24f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 117.873271][ T5789] RAX: ffffffffffffffda RBX: 00007f73cca75fa0 RCX: 00007f73cc7fce59 [ 117.873284][ T5789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 117.873296][ T5789] RBP: 00007f73cb24f090 R08: 0000200000000400 R09: 000000000000006e [ 117.873309][ T5789] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000001 [ 117.873322][ T5789] R13: 00007f73cca76038 R14: 00007f73cca75fa0 R15: 00007ffd10c1f4d8 [ 117.873340][ T5789] [ 117.985221][ T5792] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 117.985318][ T5792] System zones: 0-2, 18-18, 34-34 [ 117.989199][ T5792] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.616: bg 0: block 248: padding at end of block bitmap is not set [ 117.989236][ T5792] loop0: lost filesystem error report for type 5 error -117 [ 117.990935][ T5792] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.616: Failed to acquire dquot type 1 [ 117.990962][ T5792] loop0: lost filesystem error report for type 5 error -117 [ 117.991582][ T5792] EXT4-fs (loop0): 1 truncate cleaned up [ 117.993884][ T5792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.993953][ T5792] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.001905][ T5793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.002174][ T5793] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.010086][ T5786] EXT4-fs: Ignoring removed oldalloc option [ 118.010157][ T5786] EXT4-fs: test_dummy_encryption option not supported [ 118.047199][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.086126][ T5799] EXT4-fs: Ignoring removed bh option [ 118.315127][ T5808] Failed to initialize the IGMP autojoin socket (err -2) [ 118.337149][ T5799] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 118.347190][ T5799] EXT4-fs (loop2): 1 truncate cleaned up [ 118.353771][ T5799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.408724][ T5813] EXT4-fs: test_dummy_encryption option not supported [ 118.551055][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.700365][ T5822] EXT4-fs: inline encryption not supported [ 118.707230][ T5822] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.715735][ T5822] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.791718][ T5822] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.627: Failed to acquire dquot type 1 [ 118.791837][ T5822] loop2: lost filesystem error report for type 5 error -5 [ 118.792135][ T5822] EXT4-fs (loop2): Remounting filesystem read-only [ 118.792312][ T5822] EXT4-fs (loop2): 1 truncate cleaned up [ 118.793613][ T5822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.951802][ T5829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.627'. [ 118.955667][ T5830] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 119.607530][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.617683][ T38] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 119.631002][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.645722][ T38] loop0: lost filesystem error report for type 5 error -117 [ 119.688272][ T5832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.784546][ T5838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.629'. [ 119.807546][ T5832] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 119.864762][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.891539][ T5838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.629'. [ 119.923774][ T5840] set_capacity_and_notify: 12 callbacks suppressed [ 119.923805][ T5840] loop5: detected capacity change from 0 to 512 [ 120.151660][ T5845] loop2: detected capacity change from 0 to 512 [ 120.280091][ T5848] loop3: detected capacity change from 0 to 512 [ 120.292018][ T5840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.336269][ T5840] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.363047][ T5845] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.634: corrupted inode contents [ 120.374821][ T5845] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 120.375917][ T5845] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.634: mark_inode_dirty error [ 120.396308][ T5845] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 120.397892][ T5845] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.634: corrupted inode contents [ 120.418810][ T5845] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 120.419322][ T5845] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.634: mark_inode_dirty error [ 120.433672][ T3680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.439604][ T5845] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 120.449109][ C1] EXT4-fs (loop2): error count since last fsck: 3 [ 120.449635][ C1] EXT4-fs (loop2): initial error at time 1780417606: ext4_do_update_inode:5690: inode 16 [ 120.449713][ C1] EXT4-fs (loop2): last error at time 1780417606: ext4_do_update_inode:5690: inode 16 [ 120.470529][ T5861] loop1: detected capacity change from 0 to 512 [ 120.470863][ T5861] EXT4-fs: Ignoring removed bh option [ 120.510104][ T5845] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.634: corrupted inode contents [ 120.521872][ T5845] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 120.523660][ T5845] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 120.541382][ T5845] loop2: lost filesystem error report for type 5 error -117 [ 120.541849][ T5845] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.634: corrupted inode contents [ 120.561050][ T5845] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 120.563104][ T5845] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.634: mark_inode_dirty error [ 120.588806][ T5845] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 120.592329][ T5861] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 120.611997][ T5845] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 120.627344][ T5845] loop2: lost filesystem error report for type 5 error -117 [ 120.638545][ T5861] EXT4-fs (loop1): 1 truncate cleaned up [ 120.645060][ T5845] EXT4-fs (loop2): 1 truncate cleaned up [ 120.646661][ T5861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.670081][ T38] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 120.694112][ T38] loop2: lost filesystem error report for type 5 error -117 [ 120.699148][ T5845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.724856][ T5845] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.829253][ T5868] loop0: detected capacity change from 0 to 1024 [ 120.842195][ T5868] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 120.920373][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.931254][ T5868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.984294][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.166513][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.412849][ T5895] loop1: detected capacity change from 0 to 512 [ 121.499756][ T5901] loop3: detected capacity change from 0 to 512 [ 121.506442][ T5901] EXT4-fs: Ignoring removed nobh option [ 121.523543][ T5895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.547317][ T5901] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.562814][ T5895] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.599848][ T5901] EXT4-fs (loop3): 1 truncate cleaned up [ 121.612270][ T5901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.634489][ T5908] loop0: detected capacity change from 0 to 1024 [ 121.643300][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.654326][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 121.654383][ T28] audit: type=1400 audit(1780417607.487:1461): avc: denied { write } for pid=5898 comm="syz.3.651" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.695866][ T5908] EXT4-fs: Ignoring removed nobh option [ 121.712925][ T5908] EXT4-fs: Ignoring removed i_version option [ 121.742778][ T5908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.757192][ T28] audit: type=1400 audit(1780417607.587:1462): avc: denied { write } for pid=5907 comm="syz.0.654" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.787942][ T5914] loop1: detected capacity change from 0 to 512 [ 121.837578][ T5908] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 121.858877][ T5908] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1332 with error 28 [ 121.871937][ T5908] EXT4-fs (loop0): This should not happen!! Data will be lost [ 121.871937][ T5908] [ 121.881697][ T5908] EXT4-fs (loop0): Total free blocks count 0 [ 121.887889][ T5908] EXT4-fs (loop0): Free/Dirty block details [ 121.894051][ T5908] EXT4-fs (loop0): free_blocks=20480 [ 121.899568][ T5908] EXT4-fs (loop0): dirty_blocks=1344 [ 121.899588][ T5908] EXT4-fs (loop0): Block reservation details [ 121.899599][ T5908] EXT4-fs (loop0): i_reserved_data_blocks=84 [ 122.031613][ T3428] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1332 with error 28 [ 122.057005][ T3295] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 122.129361][ T5924] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 122.138238][ T5924] vhci_hcd vhci_hcd.0: invalid port number 255 [ 122.151253][ T5924] netlink: 'syz.1.658': attribute type 10 has an invalid length. [ 122.181523][ T5924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.195509][ T5924] team0: Port device bond0 added [ 122.211967][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.308970][ T5924] loop1: detected capacity change from 0 to 512 [ 122.341414][ T5924] EXT4-fs: old and new quota format mixing [ 122.373342][ T5942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.386058][ T5942] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.406386][ T3680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.430930][ T28] audit: type=1400 audit(1780417608.267:1463): avc: denied { compute_member } for pid=5944 comm="syz.3.666" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 122.545710][ T5955] EXT4-fs: Ignoring removed bh option [ 122.545903][ T3382] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 122.580918][ T5955] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 122.587429][ T5964] batadv_slave_0: entered promiscuous mode [ 122.596221][ T3382] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 122.627065][ T3382] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 122.644804][ T5964] batadv_slave_0: left promiscuous mode [ 122.657384][ T3382] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 122.673143][ T5955] EXT4-fs (loop5): 1 truncate cleaned up [ 122.682726][ T5955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.717472][ T3382] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 122.747387][ T3382] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 122.760172][ T3382] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 122.767730][ T3382] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 122.775575][ T3382] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 122.817349][ T3382] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 122.825972][ T3382] hid-generic 0006:0008:0001.0004: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 122.853981][ T3680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.892917][ T5987] fido_id[5987]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 122.933983][ T5984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.958258][ T5984] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.144466][ T28] audit: type=1326 audit(1780417608.977:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.2.682" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5d5fce59 code=0x7ffc0000 [ 123.178016][ T28] audit: type=1326 audit(1780417608.977:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.2.682" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5d5fce59 code=0x7ffc0000 [ 123.215816][ T28] audit: type=1326 audit(1780417608.977:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.2.682" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5d5fce59 code=0x7ffc0000 [ 123.258016][ T28] audit: type=1326 audit(1780417608.977:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.2.682" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5d5fce59 code=0x7ffc0000 [ 123.297003][ T28] audit: type=1326 audit(1780417608.977:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.2.682" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a5d5fce59 code=0x7ffc0000 [ 123.322729][ T28] audit: type=1326 audit(1780417608.977:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.2.682" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5d5fce59 code=0x7ffc0000 [ 123.349177][ T28] audit: type=1326 audit(1780417608.977:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.2.682" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5d5fce59 code=0x7ffc0000 [ 123.495438][ T6040] Failed to initialize the IGMP autojoin socket (err -2) [ 123.510332][ T6053] EXT4-fs: Ignoring removed bh option [ 123.580907][ T6053] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 123.616977][ T6053] EXT4-fs (loop5): 1 truncate cleaned up [ 123.887370][ T6113] __nla_validate_parse: 4 callbacks suppressed [ 123.887389][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'. [ 123.944593][ T6125] FAULT_INJECTION: forcing a failure. [ 123.944593][ T6125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.957734][ T6125] CPU: 1 UID: 0 PID: 6125 Comm: syz.5.697 Not tainted syzkaller #0 PREEMPT(lazy) [ 123.957764][ T6125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 123.957777][ T6125] Call Trace: [ 123.957784][ T6125] [ 123.957792][ T6125] __dump_stack+0x1d/0x30 [ 123.957831][ T6125] dump_stack_lvl+0x95/0xd0 [ 123.957853][ T6125] dump_stack+0x15/0x1b [ 123.957873][ T6125] should_fail_ex+0x263/0x280 [ 123.957896][ T6125] should_fail+0xb/0x20 [ 123.957913][ T6125] should_fail_usercopy+0x1a/0x20 [ 123.957954][ T6125] _copy_from_user+0x1c/0xb0 [ 123.957979][ T6125] kstrtouint_from_user+0x69/0xf0 [ 123.958013][ T6125] ? 0xffffffff81000000 [ 123.958083][ T6125] ? selinux_file_permission+0x1e1/0x320 [ 123.958111][ T6125] proc_fail_nth_write+0x50/0x160 [ 123.958142][ T6125] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 123.958199][ T6125] vfs_write+0x269/0x9f0 [ 123.958229][ T6125] ? __rcu_read_unlock+0x4e/0x70 [ 123.958251][ T6125] ? __fget_files+0x184/0x1c0 [ 123.958282][ T6125] ? mutex_lock+0x57/0x90 [ 123.958306][ T6125] ksys_write+0xdc/0x1a0 [ 123.958335][ T6125] __x64_sys_write+0x40/0x50 [ 123.958359][ T6125] x64_sys_call+0x27e1/0x3020 [ 123.958384][ T6125] do_syscall_64+0x12c/0x3b0 [ 123.958538][ T6125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.958562][ T6125] RIP: 0033:0x7f7995c5d68e [ 123.958579][ T6125] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 123.958598][ T6125] RSP: 002b:00007f79946f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 123.958621][ T6125] RAX: ffffffffffffffda RBX: 00007f79946f76c0 RCX: 00007f7995c5d68e [ 123.958637][ T6125] RDX: 0000000000000001 RSI: 00007f79946f70a0 RDI: 0000000000000003 [ 123.958672][ T6125] RBP: 00007f79946f7090 R08: 0000000000000000 R09: 0000000000000000 [ 123.958713][ T6125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.958726][ T6125] R13: 00007f7995f16038 R14: 00007f7995f15fa0 R15: 00007fffe8286a78 [ 123.958747][ T6125] [ 124.325687][ T6149] EXT4-fs: Ignoring removed bh option [ 124.333067][ T6149] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 124.343141][ T6149] EXT4-fs (loop1): 1 truncate cleaned up [ 124.743180][ T6165] ext4: Unknown parameter 'noacl' [ 125.076113][ T6198] set_capacity_and_notify: 10 callbacks suppressed [ 125.076134][ T6198] loop3: detected capacity change from 0 to 1024 [ 125.105013][ T6202] loop2: detected capacity change from 0 to 512 [ 125.126765][ T6198] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 125.177592][ T6198] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 125.206756][ T6198] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: inode #32: comm syz.3.723: iget: special inode unallocated [ 125.231098][ T6198] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 125.231301][ T6198] EXT4-fs (loop3): no journal found [ 125.236271][ T6210] loop5: detected capacity change from 0 to 512 [ 125.244622][ T6198] EXT4-fs (loop3): can't get journal size [ 125.252020][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 125.252042][ C1] EXT4-fs (loop3): initial error at time 1780417611: ext4_get_journal_inode:5896: inode 32 [ 125.252071][ C1] EXT4-fs (loop3): last error at time 1780417611: ext4_get_journal_inode:5896: inode 32 [ 125.278006][ T6212] FAULT_INJECTION: forcing a failure. [ 125.278006][ T6212] name failslab, interval 1, probability 0, space 0, times 0 [ 125.306585][ T6198] EXT4-fs (loop3): filesystem is read-only [ 125.312705][ T6212] CPU: 1 UID: 0 PID: 6212 Comm: syz.0.727 Not tainted syzkaller #0 PREEMPT(lazy) [ 125.312735][ T6212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 125.312808][ T6212] Call Trace: [ 125.312815][ T6212] [ 125.312823][ T6212] __dump_stack+0x1d/0x30 [ 125.312848][ T6212] dump_stack_lvl+0x95/0xd0 [ 125.312867][ T6212] dump_stack+0x15/0x1b [ 125.312885][ T6212] should_fail_ex+0x263/0x280 [ 125.313039][ T6212] ? ftrace_profile_set_filter+0xc2/0x190 [ 125.313136][ T6212] should_failslab+0x8c/0xb0 [ 125.313167][ T6212] __kmalloc_cache_noprof+0x5f/0x400 [ 125.313305][ T6212] ftrace_profile_set_filter+0xc2/0x190 [ 125.313387][ T6212] perf_ioctl+0x9e7/0x15c0 [ 125.313453][ T6212] ? do_vfs_ioctl+0x84f/0xe70 [ 125.313482][ T6212] ? selinux_file_ioctl+0x338/0x3b0 [ 125.313510][ T6212] ? __fget_files+0x184/0x1c0 [ 125.313566][ T6212] ? mutex_lock+0x57/0x90 [ 125.313642][ T6212] ? __pfx_perf_ioctl+0x10/0x10 [ 125.313669][ T6212] __se_sys_ioctl+0xce/0x140 [ 125.313694][ T6212] __x64_sys_ioctl+0x43/0x50 [ 125.313827][ T6212] x64_sys_call+0x1563/0x3020 [ 125.313849][ T6212] do_syscall_64+0x12c/0x3b0 [ 125.313878][ T6212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.313902][ T6212] RIP: 0033:0x7f0a74e1ce59 [ 125.313920][ T6212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.314014][ T6212] RSP: 002b:00007f0a7386f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.314038][ T6212] RAX: ffffffffffffffda RBX: 00007f0a75095fa0 RCX: 00007f0a74e1ce59 [ 125.314055][ T6212] RDX: 0000200000000580 RSI: 0000000040082406 RDI: 0000000000000003 [ 125.314069][ T6212] RBP: 00007f0a7386f090 R08: 0000000000000000 R09: 0000000000000000 [ 125.314092][ T6212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.314107][ T6212] R13: 00007f0a75096038 R14: 00007f0a75095fa0 R15: 00007ffd5b0b6d18 [ 125.314128][ T6212] [ 125.520646][ T6210] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.556331][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.731'. [ 125.584481][ T6226] netlink: 'syz.2.733': attribute type 4 has an invalid length. [ 125.596693][ T6226] netlink: 17 bytes leftover after parsing attributes in process `syz.2.733'. [ 125.811406][ T6247] loop1: detected capacity change from 0 to 512 [ 125.847601][ T6247] EXT4-fs: Ignoring removed bh option [ 125.865264][ T6247] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 125.882899][ T6246] loop0: detected capacity change from 0 to 1764 [ 125.896015][ T6247] EXT4-fs (loop1): 1 truncate cleaned up [ 125.924739][ T6252] loop2: detected capacity change from 0 to 512 [ 125.953311][ T6252] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.060750][ T6261] loop1: detected capacity change from 0 to 512 [ 126.273309][ T6278] loop2: detected capacity change from 0 to 1024 [ 126.335302][ T6284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.753'. [ 126.392570][ T6286] loop2: detected capacity change from 0 to 512 [ 126.429071][ T6286] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.478403][ T6293] loop1: detected capacity change from 0 to 512 [ 126.582782][ T6298] FAULT_INJECTION: forcing a failure. [ 126.582782][ T6298] name failslab, interval 1, probability 0, space 0, times 0 [ 126.638013][ T6298] CPU: 1 UID: 0 PID: 6298 Comm: syz.0.758 Not tainted syzkaller #0 PREEMPT(lazy) [ 126.638045][ T6298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 126.638058][ T6298] Call Trace: [ 126.638065][ T6298] [ 126.638072][ T6298] __dump_stack+0x1d/0x30 [ 126.638115][ T6298] dump_stack_lvl+0x95/0xd0 [ 126.638138][ T6298] dump_stack+0x15/0x1b [ 126.638260][ T6298] should_fail_ex+0x263/0x280 [ 126.638283][ T6298] should_failslab+0x8c/0xb0 [ 126.638336][ T6298] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 126.638429][ T6298] ? __alloc_skb+0x2d6/0x690 [ 126.638452][ T6298] __alloc_skb+0x2d6/0x690 [ 126.638507][ T6298] ? __alloc_skb+0x200/0x690 [ 126.638527][ T6298] netlink_alloc_large_skb+0xbf/0xf0 [ 126.638617][ T6298] netlink_sendmsg+0x40c/0x6f0 [ 126.638695][ T6298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.638746][ T6298] ____sys_sendmsg+0x563/0x5b0 [ 126.638816][ T6298] ___sys_sendmsg+0x195/0x1e0 [ 126.638848][ T6298] __x64_sys_sendmsg+0xd4/0x160 [ 126.638919][ T6298] x64_sys_call+0x194c/0x3020 [ 126.638942][ T6298] do_syscall_64+0x12c/0x3b0 [ 126.639052][ T6298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.639077][ T6298] RIP: 0033:0x7f0a74e1ce59 [ 126.639096][ T6298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.639162][ T6298] RSP: 002b:00007f0a7386f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.639208][ T6298] RAX: ffffffffffffffda RBX: 00007f0a75095fa0 RCX: 00007f0a74e1ce59 [ 126.639224][ T6298] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 126.639239][ T6298] RBP: 00007f0a7386f090 R08: 0000000000000000 R09: 0000000000000000 [ 126.639253][ T6298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.639267][ T6298] R13: 00007f0a75096038 R14: 00007f0a75095fa0 R15: 00007ffd5b0b6d18 [ 126.639287][ T6298] [ 126.998445][ T28] kauditd_printk_skb: 185 callbacks suppressed [ 126.998463][ T28] audit: type=1400 audit(1780417612.837:1656): avc: denied { append } for pid=6306 comm="syz.2.762" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.074778][ T6316] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.126473][ T28] audit: type=1400 audit(1780417612.957:1657): avc: denied { write } for pid=6315 comm="syz.0.766" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.151184][ T6316] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.766: bg 0: block 112: padding at end of block bitmap is not set [ 127.204454][ T6324] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 127.227197][ T6322] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.249654][ T6324] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 127.257986][ T6316] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 127.270414][ T28] audit: type=1400 audit(1780417612.957:1658): avc: denied { read write } for pid=6315 comm="syz.0.766" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.303045][ T6324] EXT4-fs (loop3): 1 truncate cleaned up [ 127.339718][ T6316] EXT4-fs (loop0): This should not happen!! Data will be lost [ 127.339718][ T6316] [ 127.351384][ T6324] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 127.363631][ T28] audit: type=1400 audit(1780417612.957:1659): avc: denied { open } for pid=6315 comm="syz.0.766" path="/139/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.369303][ T6316] EXT4-fs (loop0): Total free blocks count 0 [ 127.406215][ T6315] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.766: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.449892][ T6316] EXT4-fs (loop0): Free/Dirty block details [ 127.463270][ T28] audit: type=1400 audit(1780417613.167:1660): avc: denied { map } for pid=6315 comm="syz.0.766" path="/139/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.467433][ T6316] EXT4-fs (loop0): free_blocks=0 [ 127.515100][ T6315] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.766: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.527798][ T28] audit: type=1400 audit(1780417613.167:1661): avc: denied { execute } for pid=6315 comm="syz.0.766" path="/139/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.552227][ T6316] EXT4-fs (loop0): dirty_blocks=16 [ 127.557675][ T6316] EXT4-fs (loop0): Block reservation details [ 127.591517][ T6315] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 4: comm syz.0.766: lblock 4 mapped to illegal pblock 4 (length 1) [ 127.595101][ T6316] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 127.615625][ T28] audit: type=1400 audit(1780417613.167:1662): avc: denied { remount } for pid=6323 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 127.637693][ T6315] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 4: comm syz.0.766: lblock 4 mapped to illegal pblock 4 (length 1) [ 127.653993][ T6315] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 4: comm syz.0.766: lblock 4 mapped to illegal pblock 4 (length 1) [ 127.697939][ T6315] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.766: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.744694][ T28] audit: type=1400 audit(1780417613.577:1663): avc: denied { create } for pid=6347 comm="syz.3.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 127.755468][ T6315] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.766: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.894987][ T6316] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.766: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.919579][ T6315] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.766: lblock 0 mapped to illegal pblock 0 (length 1) [ 128.080022][ T6361] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.091071][ T3295] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 128.155958][ T28] audit: type=1326 audit(1780417613.987:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.0.781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a74e1ce59 code=0x7ffc0000 [ 128.184958][ T6365] FAULT_INJECTION: forcing a failure. [ 128.184958][ T6365] name failslab, interval 1, probability 0, space 0, times 0 [ 128.225602][ T6365] CPU: 1 UID: 0 PID: 6365 Comm: syz.0.781 Not tainted syzkaller #0 PREEMPT(lazy) [ 128.225633][ T6365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 128.225714][ T6365] Call Trace: [ 128.225722][ T6365] [ 128.225730][ T6365] __dump_stack+0x1d/0x30 [ 128.225755][ T6365] dump_stack_lvl+0x95/0xd0 [ 128.225774][ T6365] dump_stack+0x15/0x1b [ 128.225872][ T6365] should_fail_ex+0x263/0x280 [ 128.225896][ T6365] should_failslab+0x8c/0xb0 [ 128.225929][ T6365] kmem_cache_alloc_noprof+0x66/0x3f0 [ 128.225960][ T6365] ? audit_log_start+0x34c/0x730 [ 128.225998][ T6365] audit_log_start+0x34c/0x730 [ 128.226027][ T6365] audit_seccomp+0x47/0x100 [ 128.226050][ T6365] ? __seccomp_filter+0x8db/0x1350 [ 128.226081][ T6365] __seccomp_filter+0x8ec/0x1350 [ 128.226198][ T6365] ? __rcu_read_unlock+0x4e/0x70 [ 128.226220][ T6365] ? __fget_files+0x184/0x1c0 [ 128.226239][ T6365] ? mutex_lock+0x57/0x90 [ 128.226259][ T6365] ? mutex_unlock+0x4e/0x90 [ 128.226284][ T6365] __secure_computing+0x81/0x150 [ 128.226351][ T6365] do_syscall_64+0xce/0x3b0 [ 128.226421][ T6365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.226447][ T6365] RIP: 0033:0x7f0a74ddd68e [ 128.226465][ T6365] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 128.226484][ T6365] RSP: 002b:00007f0a7386efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 128.226507][ T6365] RAX: ffffffffffffffda RBX: 00007f0a7386f6c0 RCX: 00007f0a74ddd68e [ 128.226520][ T6365] RDX: 000000000000000f RSI: 00007f0a7386f0a0 RDI: 0000000000000004 [ 128.226585][ T6365] RBP: 00007f0a7386f090 R08: 0000000000000000 R09: 0000000000000000 [ 128.226600][ T6365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.226615][ T6365] R13: 00007f0a75096038 R14: 00007f0a75095fa0 R15: 00007ffd5b0b6d18 [ 128.226633][ T6365] [ 128.226641][ T6365] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 128.264145][ T6367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=6367 comm=syz.2.782 [ 128.466787][ T6367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.782'. [ 128.484185][ T6367] netlink: 20 bytes leftover after parsing attributes in process `syz.2.782'. [ 128.537598][ T6372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.783'. [ 128.556826][ T6372] netlink: 68 bytes leftover after parsing attributes in process `syz.0.783'. [ 128.592227][ T6372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.783'. [ 128.602641][ T6348] ================================================================== [ 128.610837][ T6348] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 128.618233][ T6348] [ 128.620574][ T6348] read-write to 0xffffc90000effe30 of 8 bytes by task 6354 on cpu 1: [ 128.628743][ T6348] shmem_writeout+0x2f1/0x920 [ 128.633528][ T6348] shrink_folio_list+0x1f52/0x2840 [ 128.638668][ T6348] evict_folios+0x285f/0x3370 [ 128.643371][ T6348] try_to_shrink_lruvec+0x858/0xc20 [ 128.648613][ T6348] shrink_lruvec+0x256/0x1bc0 [ 128.653298][ T6348] shrink_node+0x697/0x20a0 [ 128.657914][ T6348] do_try_to_free_pages+0x408/0xc90 [ 128.663117][ T6348] try_to_free_mem_cgroup_pages+0x201/0x420 [ 128.669017][ T6348] try_charge_memcg+0x373/0xa10 [ 128.673879][ T6348] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 128.679517][ T6348] __alloc_frozen_pages_noprof+0x18a/0x350 [ 128.685333][ T6348] alloc_pages_mpol+0xb3/0x260 [ 128.690106][ T6348] alloc_pages_noprof+0x8f/0x140 [ 128.695050][ T6348] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 128.700946][ T6348] __kvmalloc_node_noprof+0x3d4/0x640 [ 128.706332][ T6348] futex_hash_allocate+0x190/0x9a0 [ 128.711457][ T6348] futex_hash_prctl+0xd8/0xf0 [ 128.716164][ T6348] __se_sys_prctl+0x4f4/0x1400 [ 128.720952][ T6348] __x64_sys_prctl+0x67/0x80 [ 128.725636][ T6348] x64_sys_call+0x2533/0x3020 [ 128.730327][ T6348] do_syscall_64+0x12c/0x3b0 [ 128.734930][ T6348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.740926][ T6348] [ 128.743255][ T6348] read to 0xffffc90000effe30 of 8 bytes by task 6348 on cpu 0: [ 128.750800][ T6348] shmem_fallocate+0x5c0/0x920 [ 128.755593][ T6348] vfs_fallocate+0x3b6/0x400 [ 128.760283][ T6348] __x64_sys_fallocate+0x7a/0xd0 [ 128.765243][ T6348] x64_sys_call+0x298e/0x3020 [ 128.769924][ T6348] do_syscall_64+0x12c/0x3b0 [ 128.774611][ T6348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.780514][ T6348] [ 128.782855][ T6348] value changed: 0x000000000000123e -> 0x0000000000001243 [ 128.789960][ T6348] [ 128.792283][ T6348] Reported by Kernel Concurrency Sanitizer on: [ 128.798614][ T6348] CPU: 0 UID: 0 PID: 6348 Comm: syz.1.775 Not tainted syzkaller #0 PREEMPT(lazy) [ 128.807828][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 128.817980][ T6348] ================================================================== [ 128.842865][ T6376] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 128.873995][ T6372] netlink: 68 bytes leftover after parsing attributes in process `syz.0.783'. [ 128.943332][ T6372] Failed to initialize the IGMP autojoin socket (err -2)