last executing test programs: 54.613925467s ago: executing program 0 (id=744): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x10000, 0xe4f, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) unshare(0x22020600) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @empty, 0xf66e}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r1, 0x0, 0x0, 0xc0, 0x0, 0x0) 53.753198368s ago: executing program 0 (id=746): getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x1}, 0x11c0ad, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x7ffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000000)={0x7, "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"}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0xffffffffffffffff, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@nombcache}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLf6U8WloIFETFI2nSBz1wAYHEAQQSHIo4BSetSt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPRenfTxLVDHk6c4s9H2nZmd92Z786OPTtjN4CuNZT+kUTsjohfI2Iwyy4/YSj76+bCbOWvhdlKErXaa38m9fNuLMxW8n9i8XW7sh21Wp7f0aTc+TcjxqvVyct5fmTm4jsj01euPnX+4vi5yXOTl8ZOnz5x/HDfqbGTbYkzjevGwfenDh148Y1rL1fOXHvrx6/T+u7OjxdxtNNQdnWberTdhXXYniXppNzBirAmabulzdVb7/+D0RMDi8cG44WPOlo5YFPVarVas8/n3FwN+A9LotM1ADqj+KBPn3+LbYuGHtvCH89mD0Bp3DfzLTtSjlJ+Tm/D82079UfEmbm/v0i32KR5CACApb5Nxz9PNhv/leKeJef9L19D2RsR/4+IfRFxV0Tsj4i7I+rn3hsR962x/MYVktvHP6Xr6wpsldLx3zP52tby8V8x+ou9PXluTz3+3uTs+erksfyaHI3eHWl+dNlLlvvu+V8+a9z3aT7NPrRk/JduafnFWDCvx/VywwTdxPjMeFuCT+P/MOJguVn8SRTLOElEHIiIg+ss4/zjXx1qdezf419BG9aZal9GPJa1/1w0xF9IWq5Pjj59auzkSH9UJ4+NFHfF7X76ef7VVuVvKP42SNt/Z9P7P4s/fUZM+iOmr1y9UF+vnV57GfO/fVxJWhzbv877vy95vZ7uy/e9Nz4zc3k0oi95Kc0OLNs/duu1Rb44P43/6JHm/X9f9nhWvxL3R0R6Ex+OiAci4sG87R6KiIcj4sgK8f/w3CNvtzrWuv1XmJVvozT+iRXaP33LS1O32n/tiZ4L33/Tqvzaqtr/RD11NN+zmve/1VZwI9cOAAAA7hSl+nfgk9LwYrpUGh7OvsO/P3aWqlPTM0+cnXr30kT2Xfm90VsqZroGl8yHjuZzw0V+rCF/PJ83/rxnoJ4frkxVJzodPHS5XS36f+r3nk7XDth0fq8F3Uv/h+6l/0P30v+he+n/0KX6mu/+YKvrAXTE2j//+zelHsDWM/6H7qX/Q/fS/6ErtfxtfGlDP/m/UxPl7VGNpomB7VGNIhGlbVGN9iVe+STrEtulPkWivOr/zGKdiR1ND3X6nQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA9/gkAAP//Uo/mdg==") 53.068153984s ago: executing program 0 (id=737): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$netlink(0x10, 0x3, 0x4) unshare(0x2c020400) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0xf, 0x243, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5411, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) 53.008626516s ago: executing program 0 (id=738): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nombcache}, {}, {@delalloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@init_itable}, {@nodelalloc}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) sendmsg$kcm(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="e31eebbaef60d0df1bb6dfdc2ecc4b7021f75d5001ffc32877553de70637f112", 0x20}], 0x1}, 0x20008005) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x240408c1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x1, @empty, 0x7}], 0x1c) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 52.918071808s ago: executing program 0 (id=743): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000080) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffe4) 52.770511101s ago: executing program 0 (id=752): sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 52.702135433s ago: executing program 32 (id=752): sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 4.299540408s ago: executing program 4 (id=1285): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x1, 0x87, 0xffffffff, 0x2}) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000380)) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000000}, 0x40054) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x800810, &(0x7f00000000c0), 0x0, 0x515, &(0x7f0000001480)="$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") 4.033811055s ago: executing program 4 (id=1290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0xf870, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x9, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x7fff, 0x5, 0x2, 0xe, 0x4, 0xfffc, 0x3, 0x1, 0x40]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0xffe0}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0xc, 0x2, 0x4, 0x2, 0xd, 0x6, 0x6, 0x9, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0xfff7, 0xd06, 0xff05, 0x8000, 0xb, 0x5, 0x5, 0x86, 0xd, 0xfe], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x9, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 3.680498713s ago: executing program 4 (id=1295): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff, 0x40, 0x444, &(0x7f0000000800)="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", 0xfe, 0x27, 0x8, 0x6, 0x4c6f, 0x2, 0x5, 'syz0\x00'}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2840, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.546184666s ago: executing program 4 (id=1300): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xb0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000220900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000022c0000000e0a010400000000000000000a0000000900020073797a31000000000900010073797a31"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) r2 = syz_open_dev$vcsa(0x0, 0x1af, 0x0) read(r2, 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) 3.471675358s ago: executing program 4 (id=1303): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) 2.698401907s ago: executing program 1 (id=1307): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x9, 0xb, 0x10000005, 0x8c45, 0x200}, 0x5b, 0xf}, [{0x5c, 0x71e, 0x3, 0xfffffffe, 0x6, 0x1}, {0x5, 0x40, 0x2, 0xd, 0x401}, {0x5, 0xc, 0x8, 0xfffffffb, 0x3, 0xfffffffb}, {0x8, 0xfffffffc, 0x16, 0x9, 0x2, 0x9}, {0x20000000, 0x80000000, 0x3, 0x1, 0x76}, {0x10001, 0x459e, 0x5, 0xb8a5, 0x5, 0x8}, {0x8, 0x2, 0x1ff, 0xfffffffa, 0x8, 0x3}, {0x1b, 0x8, 0x900000, 0xfffffff8, 0x5, 0x8}, {0x9, 0xfffffffd, 0x9, 0x10, 0x4}, {0x0, 0xcc, 0x3, 0xffff, 0x7, 0x7}, {0x8, 0x6, 0xdc5, 0x3, 0x3, 0xfffffffa}, {0xa8, 0x5, 0x10000, 0xffffffff, 0x6b0c, 0x8e2}, {0x6, 0x8, 0x200, 0x1, 0x0, 0xffffffff}, {0x2, 0x3, 0x9, 0x0, 0x1, 0x8}, {0x7, 0x30000000, 0x4, 0xb, 0x5, 0x7}, {0x7fff, 0x6, 0x3, 0x6, 0x64, 0x6}, {0xa, 0x9, 0x6, 0x8, 0xfb}, {0xb1, 0xa37, 0xfffffeff, 0x100, 0x200, 0x1}, {0x100, 0x3, 0x8, 0x9, 0x7, 0x8}, {0x4e91, 0x1, 0xffffffff, 0x40f, 0xe, 0x1b}, {0xffff, 0x2, 0xfffffff0, 0x101, 0x7ff, 0x6}, {0x1, 0xb, 0x3, 0x5, 0xfffffffc, 0x5}, {0x2, 0x2, 0x400, 0x1a76, 0xa, 0x800}, {0xa578, 0x5, 0x5, 0x9c, 0x675, 0x88b}, {0xfffff221, 0x101, 0x5, 0xfffffff9, 0x80000000, 0x481}, {0x5, 0x0, 0x7, 0x0, 0xb, 0x3}, {0x3, 0xc11, 0x400, 0x6, 0x53f, 0x9}, {0x3, 0x7, 0x6, 0x4, 0x4, 0x4}, {0x5, 0x401, 0x1, 0x6, 0x4, 0x1ff}, {0xffffffff, 0x40089cf3, 0x5, 0x3, 0x9, 0x800}, {0x0, 0x2, 0x4, 0x9, 0x2}, {0x29f, 0xca, 0x0, 0x1, 0x5, 0xfffffff9}, {0x10001, 0x10001, 0x10, 0x4, 0x10000, 0x6}, {0xae7, 0x800, 0x80000001, 0xf, 0x6, 0x6}, {0x4, 0x4, 0x8, 0x2, 0x9, 0x4c}, {0x4, 0x1, 0xfffffff7, 0xcc, 0x7ff, 0xeb9a}, {0x8001, 0x3, 0x2bd2, 0x1621, 0x3, 0x2}, {0x8, 0xfffffe00, 0x9, 0xd5e, 0x5, 0x2}, {0x6, 0x4, 0x6, 0x11f, 0xc, 0x1}, {0x5, 0x101, 0x721, 0x100, 0x908, 0x8}, {0x2597, 0xa, 0x9, 0x8, 0x80000001, 0x4}, {0x3, 0x7fffffff, 0x200, 0x8ad, 0xd34e}, {0x7fff, 0x800, 0x6, 0x2, 0x7, 0xb2f6}, {0x4, 0xc7, 0x6c, 0xfffffd20, 0x6, 0x4}, {0x401, 0x5, 0x3, 0xdf, 0x8}, {0x5, 0x1, 0x0, 0x2, 0x6, 0xa2fe}, {0xfffff685, 0xfff, 0x4, 0xa6c, 0x19, 0x5}, {0x10, 0xc771, 0x1, 0x37, 0xe3f, 0x3ff}, {0x7, 0x0, 0xa, 0x1000, 0x6, 0x401}, {0x5, 0x3ff, 0x5, 0xff, 0x10000, 0x3}, {0x2, 0x9, 0xafa5, 0x0, 0x1, 0x4}, {0x4, 0x40, 0x8, 0xa, 0x2, 0xfffffff7}, {0xb, 0x1, 0x3, 0x100, 0xb, 0x7}, {0x100, 0x995, 0x374e, 0x9, 0x1000, 0xffffdb76}, {0x3, 0x4, 0xa6de, 0x9bf4, 0x3, 0x6}, {0x7ff, 0x0, 0x9, 0x0, 0xfffffffa, 0x1}, {0x7, 0x929, 0x7f, 0xe0000, 0x2, 0x81}, {0x1, 0x34, 0x0, 0x5, 0xe22, 0x6}, {0xfffffffc, 0xaadf, 0xbc7, 0x6, 0x8, 0x2}, {0x6ef, 0x3, 0x9, 0x7, 0x4, 0x8000}, {0x2, 0x1, 0x2, 0xc3c1, 0x7, 0x4bbd}, {0x3ff, 0x4, 0xfffffffe, 0x100, 0x7fffffff, 0x3}, {0x7, 0x2, 0xff, 0x9, 0xb5a1, 0x2}, {0x9, 0x9, 0xffff, 0x100, 0xf8000000, 0x8000}, {0x0, 0xfff, 0x7, 0x7, 0xffffffff, 0xfffffffe}, {0x5, 0x9, 0x80, 0x9, 0x6, 0x9250}, {0x3, 0x5, 0x81, 0x4, 0x1, 0x6}, {0x6, 0x8, 0x0, 0x1b, 0x39, 0x4}, {0x5, 0x3ff, 0x40, 0xbe, 0xffff, 0x5}, {0x24, 0x53956696, 0x81, 0x4, 0x3, 0x5}, {0x80000001, 0x7, 0x0, 0x5, 0x2, 0x8001}, {0x10000, 0x400, 0x4, 0x1, 0x618, 0x1}, {0xf1, 0x5, 0xfffffbff, 0x5, 0x400, 0xa6}, {0x4, 0x7ff, 0x5, 0x8, 0x800, 0x8}, {0x8, 0x1, 0x1000, 0x100, 0x4, 0x45f2}, {0xd8, 0x8, 0x5, 0xf8b, 0x6, 0xb5}, {0x6, 0x7, 0xe9, 0x80, 0x5, 0xa}, {0x2, 0x0, 0x4, 0x400, 0x1, 0x6}, {0xfa9, 0x3, 0x0, 0xffff, 0x0, 0x3}, {0x99, 0x9, 0x6, 0x3, 0x5, 0x10000}, {0x7fff, 0x4, 0x6, 0x2, 0x48, 0x5}, {0xffffb1c7, 0x7, 0x80000001, 0x1, 0x800, 0xb54f}, {0x2, 0x1, 0x1000, 0x101, 0x9, 0xf7}, {0xfffff000, 0x7, 0x7, 0x6ba, 0x6}, {0x6, 0x0, 0x5, 0x6a79, 0x545, 0x7}, {0xfffffffc, 0x2c04, 0x7, 0x8000000, 0x4, 0x8000}, {0xffff, 0x7fff, 0x3, 0x3, 0x4, 0x8}, {0x100, 0x400, 0x4800000, 0x835, 0x4, 0xe09}, {0x4, 0x7b, 0xff, 0xfff, 0x1, 0x9}, {0x18000000, 0x9, 0x833b, 0xfffff251, 0x5, 0xa}, {0x623, 0x1, 0x8, 0x2, 0x5}, {0x40, 0xfffffffc, 0x4, 0x7f, 0x7, 0x3}, {0x2e, 0x80000001, 0x7fff, 0x3, 0x3, 0x401}, {0x9, 0xacc, 0xd, 0x1, 0x95e, 0x5}, {0x9c2, 0x6, 0x4, 0xffffffff, 0x1000}, {0x7b8, 0x5, 0xb, 0xa, 0x8, 0x200}, {0xf, 0xb7a, 0xe, 0x6, 0xc1, 0x7}, {0x7, 0x5f6b0af1, 0x6, 0x54, 0x0, 0x1000}, {0x78f6, 0x46000000, 0x0, 0x6, 0x8, 0xee96}, {0xfffffffe, 0x7, 0x80000001, 0xff, 0x0, 0x5}, {0x40, 0xf29, 0x9, 0xb, 0xcb, 0x1}, {0x91cb, 0x3, 0x0, 0x7, 0x3}, {0x9, 0xd0f, 0x8, 0xfffffffb, 0x8, 0x2}, {0x401, 0x7fffffff, 0x800, 0xfffff001, 0xc}, {0x6, 0x9, 0xc000, 0x0, 0x8000, 0x7fff}, {0x69, 0xffff, 0x1, 0x6, 0x80, 0x8}, {0x8c7, 0x2, 0xd0, 0x0, 0x4, 0x3}, {0x3ff, 0x4, 0x7, 0xffff, 0x1, 0xff}, {0x4, 0x1ff, 0xd, 0x9, 0x9, 0x2}, {0x7, 0x1, 0xc2, 0x7, 0x4}, {0x22b, 0x7, 0x704e, 0x3, 0x9, 0x6}, {0x80000001, 0x2, 0xffffd611, 0x8, 0x7}, {0x8000, 0x80, 0x9, 0xffff, 0x0, 0x2}, {0x6783ee0, 0x0, 0x7, 0x8, 0x1, 0xff000000}, {0x7, 0x1, 0x140000, 0x4, 0xd, 0x200}, {0xb, 0x2, 0x8, 0x6, 0x1}, {0x7, 0x69a5, 0x100, 0x236, 0x4, 0x10001}, {0x3, 0xffff0000, 0x144, 0x2, 0x81, 0x8}, {0xde8, 0x2, 0x6, 0x9b, 0x88db, 0x401}, {0x0, 0x6, 0x40, 0x0, 0x9, 0xc9}, {0x2bd1272, 0x59, 0x3921, 0x57, 0x6, 0x80000000}, {0x3, 0x7, 0xb861, 0x1, 0x6, 0x4}, {0x1, 0x3, 0x8, 0x9, 0x4, 0x8}, {0x0, 0x7, 0x80, 0xed2, 0x80000000, 0x8}, {0x2, 0xfffffc01, 0xffffffff, 0x8d5, 0x8001, 0x3fffc000}, {0x8d, 0x6, 0x0, 0x5, 0x4, 0x1}, {0x6, 0x9, 0xeec6, 0x6, 0x7, 0x9}, {0x80000000, 0xd6187927, 0x1, 0x2a, 0xa, 0x7fffffff}], [{0x1, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x7}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x5, 0xd716e616b6744d43}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x3, 0xb4d2ea9c256b621e}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x3}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0xe270aa78089fc197}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x3}, {0x2}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000880), 0xf504, r0}, 0x38) socket$inet6(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010004000000000000000c0000000c00000002000000000000000000000b000000000000"], &(0x7f0000001b80)=""/4090, 0x26, 0xffa, 0xa}, 0x28) socket$nl_rdma(0x10, 0x3, 0x14) pselect6(0x40, &(0x7f0000000080)={0x2, 0x0, 0xffff, 0x6, 0x5, 0x5938, 0x5, 0x7}, 0x0, 0x0, 0x0, 0x0) 2.571641969s ago: executing program 4 (id=1310): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r0, 0x0, r2, 0x0, 0x6, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r4, 0x0, 0x6, 0xc) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6) 2.417143633s ago: executing program 5 (id=1312): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000540)={@private0, 0x802, 0x0, 0xff, 0x9, 0xa4, 0x43}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) close(r2) 2.416992433s ago: executing program 2 (id=1313): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10020}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x80000000000008, &(0x7f0000000200)="de", 0x1) r2 = syz_open_procfs(0x0, 0x0) fchdir(r2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000005bc0)=""/23, &(0x7f0000005b80)=0x17) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x1, 0xff7ffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x12290}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r2}}}}]}, 0x38}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 2.337717275s ago: executing program 2 (id=1315): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r0}, 0x8) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000007300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r2, @ANYBLOB='/\x00\x00'], 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x61780, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 2.302374225s ago: executing program 2 (id=1316): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) iopl(0x3) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.282862886s ago: executing program 5 (id=1317): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x2c, 0x0, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) sendmsg$kcm(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="68000000000000001501000000000080b2acf7352862fcbb54dceb8c7d41ea091fad290b01a0e16161e2939c00463d754115ebf06b9a87685e336cfed89849e668890d02a20fa2c3eb05a96d98825514f05b63112aec71a2b6ca6f1f28aee5544a8b0bcd0cf711be10000000000000009c010000bf030000b8000000000000000e0100000000000077791f5e80e635ff78dff7f7e02a2221ef3dd898ff64ed7d9240953aa89ff3667dd30d6cd1b47b1457c7"], 0x140}, 0x40000) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8983, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xf1, 0x7, 0xce, 0x0, 0x7, 0x1c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_bp={0x0, 0x2}, 0x1088, 0x105, 0x0, 0x0, 0x4000, 0xffff0000, 0x0, 0x0, 0x102ff, 0x0, 0x5}, 0x0, 0xfffffff7dffffffc, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 1.448620885s ago: executing program 2 (id=1318): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x807, 0x1}, 0x0, 0x400, 0xc40, 0x2, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060500000000000000000000000000140007800500140080ff00000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a0800", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000800) syz_emit_ethernet(0x3ac, &(0x7f0000000780)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x376, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0xf8, 0x1, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x5, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x5, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0x9, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a"}, {0x21, 0x7, "ff80000000000000000000020000000000000000000000ffff008879e66485201a0015ca837400000000000000000000001c0000000000"}, {0xe, 0x14, "5e14f0e7e72d42cfb3f2a68bb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb"], 0x0, 0x56}, 0x28) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r1}, &(0x7f0000000780)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f0000000440)) 1.446705746s ago: executing program 5 (id=1328): perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x20, 0x0, 0x0, 0xff, 0x0, 0x388e, 0x29200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x2}, 0xb8ac, 0x1000, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0xfffffffffffffffd}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r0, &(0x7f0000000600), 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x19e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0xb}, 0x1e0c4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='mem\x00', 0x4) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) 1.446393266s ago: executing program 1 (id=1319): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc3, 0x4, @perf_bp={0x0, 0x6}, 0x1020, 0x0, 0xfffffffd, 0x6, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) lseek(0xffffffffffffffff, 0x401, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getpid() getdents(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='stat\x00') preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000080)=""/116, 0x74}], 0x1, 0x8, 0xfffffffe) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0xa10860, &(0x7f00000005c0)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@nombcache}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nobh}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x32, 0x39, 0x35, 0x35, 0x31, 0x64, 0x61], 0x2d, [0x38, 0x61, 0x37, 0x61], 0x2d, [0x9, 0x64, 0x0, 0x33], 0x2d, [0x32, 0x38, 0x7c42cdd5a17e5d0, 0x37], 0x2d, [0x31, 0x66, 0x34, 0x6d, 0x33, 0x36, 0x34, 0x37]}}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'net/ip6_mr_cache\x00'}}]}, 0xfc, 0x57d, &(0x7f0000000bc0)="$eJzs3d9rW1UcAPDvTX/sp66DMfRFBntwMpeurT8mCM5H0eFA32doszKaLqNJx1oHrg/uxRcZgogD8Q/w3cfhP+BfMdDBkFH0QYTITW+2tE2atkuXbPl84G7n5N6bc7+593t6Tm5CAhhYJ9J/chGvRsS3ScSRpnXDka08sbbd6qOb0+mSRK322V9JJNljje2T7P9DWeWViPjt64jTuc3tVpaW5wqlUnEhq49X56+NV5aWz1yZL8wWZ4tXJ6emzr09Nfneu+90LdY3Lv7zw6f3Pjr3zcnV7395cPROEufjcLauOY6ncKu5cqLwX1YaifMbNpzoQmP9JOn1AbArQ1mej0TaBxyJoSzrgRffVxFRAwZUIv9hQDXGAY25fZfmwc+Nhx+uTYDqsY82xz+89t5I7K/PjQ6uJutmRul8d6wL7adt/Prn3TvpElu/D3GgQx1gR26tRMTZ4eHN/X+S9X+7d7b+5vHWNrYxaH9/oJfupeOfN1uN/3KPxz/RYvxzqEXu7kbn/M896EIzbaXjv/dbjn8fd11jQ1ntpfqYbyS5fKVUPBsRL0fEqah1vPVxbvV+rd265vFfuqTtN8aC2XE8GN63fp+ZQrUQEaO7DHmdhyv14W2qTf+/vz7W3Xj+09fj4jbbOF68+1q7dZ3j31u1nyNeb3n+n5zWZOv7k+P162G8cVVs9vft47+3a7/X8T9ciTi4dfxjSfP92srO2/hp/7/Fdut2e/2PJp/Xy40kuFGoVhcmIkaTTzY/Pvlk30a9sX0a/6mTW/d/ra7/dPL1xTbjv33sdttN++H8z+zo/O+8cP/jL39s1/72zv9b9dKp7JGs/2stu1a2e4BP+/oBAAAAAABAP8lFxOFIcvnH5Vwun1/7fMexOJgrlSvV05fLi1dnov5d2bEYyTXudB9p+jzERPZ52EZ9ckN9KiKORsR3Qwfq9fx0uTTT6+ABAAAAAAAAAAAAAAAAAACgTxxq8/3/1B9DvT46YM/Vf9hgX6+PAuiFjj/5341fegL6Usf8B15Y8h8Gl/yHwSX/YXDJfxhc8h8Gl/yHwSX/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKsuXriQLrXVRzen0/rM9aXFufL1MzPFylx+fnE6P11euJafLZdnS8X8dHm+0/OVyuVrE5OxeGO8WqxUxytLy5fmy4tXq5euzBdmi5eKI88kKgAAAAAAAAAAAAAAAAAAAHi+VJaW5wqlUnGhC4UkIrrxPP1W+CD64jD2MsA1u9p9uF+i2OvCyB6kzDMprGQHvrO9etQhAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAL/wcAAP//eBcqGw==") 1.446184036s ago: executing program 3 (id=1320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x101080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r2, {0x5, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x84}, {0x5, 0x7, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfc4, 0x1, 0x5}, {0xc, 0x0, 0x2, 0x1, 0x4, 0x0, 0x2}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r2, 0x3e}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002300)="e8", 0x1}], 0x1}, 0x4) 1.383309098s ago: executing program 5 (id=1321): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x20, 0x40, 0x3, {0x7a, 0x0, 0x0, 0x0, 0x4100}}, 0x20}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) pwrite64(r0, &(0x7f0000000100)='\n', 0x1, 0x8000c5b) 1.192639562s ago: executing program 5 (id=1322): setpgid(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000c80)={'syztnl1\x00', 0x0}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x44) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="900000001000010029bd7000fbdbdf2500000000", @ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0x81}, 0x48880) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008044) 1.192454842s ago: executing program 3 (id=1323): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) tkill(r0, 0x12) waitid(0x1, r0, &(0x7f0000000000), 0x2100000c, 0x0) pipe(0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44014) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010040, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000000)=0x4, 0x4) 1.162265983s ago: executing program 1 (id=1324): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) write(r1, &(0x7f00000002c0)="fe", 0xfdef) read$watch_queue(r0, &(0x7f0000000780)=""/221, 0xfdef) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.035469296s ago: executing program 2 (id=1325): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x80) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000d80)={[{@nojoliet}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@check_relaxed}, {}, {@block={'block', 0x3d, 0x200}}, {@session={'session', 0x3d, 0x32}}, {@overriderock}, {@check_relaxed}, {@uid}, {@check_relaxed}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@overriderock}, {@uid}, {}, {@session={'session', 0x3d, 0x9}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '}'}}, {@flag='ro'}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '(\xae}!*@'}}]}, 0x4, 0xa0e, &(0x7f00000001c0)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x8}, 0x2111, 0x0, 0xc40, 0x2, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x7}, @window={0x3, 0xfffb, 0x7}, @sack_perm, @window={0x3, 0x0, 0xb}, @mss={0x2, 0x2}, @timestamp, @timestamp, @window={0x3, 0xe40, 0x100}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 1.010494136s ago: executing program 3 (id=1326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000003c0)=""/85, 0x55}, {&(0x7f0000000440)=""/252, 0xfc}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/221, 0xdd}], 0x4}, 0xff}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xfffffffd}], 0x7, 0x0, 0x0) 820.51808ms ago: executing program 1 (id=1327): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x0, r4}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x1b, r3}, 0x10) 788.051831ms ago: executing program 5 (id=1329): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r3, 0x1) 743.285642ms ago: executing program 1 (id=1330): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, r0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x10, 0xe2, 0x1, 0x2, 0x0, 0x7}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0xb1bd, 0x1, 0xfffffffffffffffc, 0x0, 0x9}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) 737.501553ms ago: executing program 3 (id=1331): syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa8040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x4800000, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000011580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000100)=0x3f6a, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="10", 0x1}], 0x1}}], 0x1, 0x5081) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="01a4ac", 0x3, 0x88c1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000640)={'sit0\x00', 0x0}) 650.544525ms ago: executing program 1 (id=1332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 549.841027ms ago: executing program 3 (id=1333): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={0x0, 0x0, 0x4018}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x7, 0xfffffffd, 0x7, 0x4, 0x53}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x11}, 0x0) connect$pppoe(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 13.916419ms ago: executing program 2 (id=1334): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4040000) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7c, &(0x7f0000000000), &(0x7f0000000440)=0x8) 0s ago: executing program 3 (id=1335): gettid() timer_create(0x9, 0x0, &(0x7f00000001c0)) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$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") readlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r3, &(0x7f0000000a00)="c7", 0x1) sendfile(r3, r2, 0x0, 0x2fffe) sendfile(r3, r2, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): x15/0x1b [ 84.023881][ T5315] should_fail_ex+0x262/0x280 [ 84.023944][ T5315] ? sctp_add_bind_addr+0x71/0x1e0 [ 84.024013][ T5315] should_failslab+0x8c/0xb0 [ 84.024094][ T5315] __kmalloc_cache_noprof+0x7a/0x400 [ 84.024215][ T5315] ? sctp_add_bind_addr+0x71/0x1e0 [ 84.024278][ T5315] sctp_add_bind_addr+0x71/0x1e0 [ 84.024347][ T5315] sctp_copy_local_addr_list+0x1b4/0x250 [ 84.024470][ T5315] sctp_copy_one_addr+0x7f/0x280 [ 84.024533][ T5315] sctp_bind_addr_copy+0x79/0x290 [ 84.024677][ T5315] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 84.024779][ T5315] sctp_connect_new_asoc+0x1c3/0x3a0 [ 84.024895][ T5315] sctp_sendmsg+0x105f/0x1d00 [ 84.024996][ T5315] ? __pfx_sctp_sendmsg+0x10/0x10 [ 84.025071][ T5315] inet_sendmsg+0xc5/0xd0 [ 84.025206][ T5315] ? __pfx_inet_sendmsg+0x10/0x10 [ 84.025265][ T5315] ____sys_sendmsg+0x4e8/0x580 [ 84.025388][ T5315] ___sys_sendmsg+0x195/0x1e0 [ 84.025578][ T5315] __sys_sendmmsg+0x185/0x320 [ 84.025776][ T5315] __x64_sys_sendmmsg+0x57/0x70 [ 84.025910][ T5315] x64_sys_call+0x1fb4/0x2550 [ 84.026058][ T5315] do_syscall_64+0x112/0x360 [ 84.026161][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.026270][ T5315] RIP: 0033:0x7fc8a4d7e159 [ 84.026328][ T5315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.026397][ T5315] RSP: 002b:00007fc8a37d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 84.026475][ T5315] RAX: ffffffffffffffda RBX: 00007fc8a5005fa0 RCX: 00007fc8a4d7e159 [ 84.026525][ T5315] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000005 [ 84.026625][ T5315] RBP: 00007fc8a4e15024 R08: 0000000000000000 R09: 0000000000000000 [ 84.026741][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.026792][ T5315] R13: 00007fc8a5006038 R14: 00007fc8a5005fa0 R15: 00007ffe2a3b2708 [ 84.026860][ T5315] [ 84.381820][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.989490][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 84.989511][ T29] audit: type=1400 audit(1788729689.534:1289): avc: denied { write } for pid=5327 comm="syz.2.634" name="instances" dev="tracefs" ino=2391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 85.043674][ T29] audit: type=1400 audit(1788729689.584:1290): avc: denied { write } for pid=5327 comm="syz.2.634" name="instances" dev="tracefs" ino=2391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 85.212556][ T5335] sctp: [Deprecated]: syz.4.635 (pid 5335) Use of struct sctp_assoc_value in delayed_ack socket option. [ 85.212556][ T5335] Use struct sctp_sack_info instead [ 85.306527][ T5335] loop4: detected capacity change from 0 to 512 [ 85.340925][ T5335] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 85.534793][ T5346] loop0: detected capacity change from 0 to 128 [ 85.557327][ T5346] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 85.572412][ T5346] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.575624][ T5346] ext2 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.605160][ T29] audit: type=1400 audit(1788729690.144:1291): avc: denied { write } for pid=5345 comm="syz.0.638" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.774438][ T29] audit: type=1400 audit(1788729690.304:1292): avc: denied { ioctl } for pid=5347 comm="syz.1.645" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 86.256887][ T5360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 86.342578][ T5362] loop2: detected capacity change from 0 to 256 [ 86.491313][ T5368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.649'. [ 86.774005][ T5372] sctp: [Deprecated]: syz.1.652 (pid 5372) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.774005][ T5372] Use struct sctp_sack_info instead [ 86.813352][ T5372] loop1: detected capacity change from 0 to 512 [ 86.824179][ T5372] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 86.838123][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.848002][ T5374] loop2: detected capacity change from 0 to 512 [ 87.097245][ T5374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.100592][ T5374] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.137871][ T29] audit: type=1400 audit(1788729691.674:1293): avc: denied { create } for pid=5373 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 87.158034][ T29] audit: type=1400 audit(1788729691.684:1294): avc: denied { setopt } for pid=5373 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 87.189453][ T5378] syzkaller0: entered promiscuous mode [ 87.189474][ T5378] syzkaller0: entered allmulticast mode [ 87.210884][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.266270][ T5389] FAULT_INJECTION: forcing a failure. [ 87.266270][ T5389] name failslab, interval 1, probability 0, space 0, times 0 [ 87.266337][ T5389] CPU: 0 UID: 0 PID: 5389 Comm: syz.2.657 Not tainted syzkaller #0 PREEMPT(lazy) [ 87.266397][ T5389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.266415][ T5389] Call Trace: [ 87.266421][ T5389] [ 87.266429][ T5389] __dump_stack+0x1d/0x30 [ 87.266464][ T5389] dump_stack_lvl+0x95/0xd0 [ 87.266497][ T5389] dump_stack+0x15/0x1b [ 87.266628][ T5389] should_fail_ex+0x262/0x280 [ 87.266841][ T5389] should_failslab+0x8c/0xb0 [ 87.266932][ T5389] __kmalloc_node_noprof+0xdb/0x500 [ 87.267019][ T5389] ? __vmalloc_node_range_noprof+0x3ef/0x1000 [ 87.267142][ T5389] ? __vmalloc_node_range_noprof+0x3ef/0x1000 [ 87.267239][ T5389] __vmalloc_node_range_noprof+0x3ef/0x1000 [ 87.267354][ T5389] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 87.267528][ T5389] ? n_tty_open+0x1d/0xd0 [ 87.267681][ T5389] vzalloc_noprof+0x82/0xb0 [ 87.267761][ T5389] ? n_tty_open+0x1d/0xd0 [ 87.267857][ T5389] n_tty_open+0x1d/0xd0 [ 87.267950][ T5389] tty_ldisc_setup+0x83/0x220 [ 87.268061][ T5389] tty_init_dev+0x183/0x320 [ 87.268248][ T5389] ptmx_open+0xda/0x240 [ 87.268390][ T5389] chrdev_open+0x2eb/0x3a0 [ 87.268482][ T5389] do_dentry_open+0x49f/0xa60 [ 87.268543][ T5389] ? __pfx_chrdev_open+0x10/0x10 [ 87.268657][ T5389] ? may_open+0x1ee/0x350 [ 87.268735][ T5389] vfs_open+0x37/0x1e0 [ 87.268783][ T5389] path_openat+0xc01/0x10d0 [ 87.268941][ T5389] do_file_open+0x16c/0x290 [ 87.269086][ T5389] do_sys_openat2+0xa0/0x130 [ 87.269173][ T5389] __x64_sys_openat+0xf2/0x120 [ 87.269235][ T5389] x64_sys_call+0x1f72/0x2550 [ 87.269308][ T5389] do_syscall_64+0x112/0x360 [ 87.269378][ T5389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.269501][ T5389] RIP: 0033:0x7f1f6150e159 [ 87.269551][ T5389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.269603][ T5389] RSP: 002b:00007f1f5ff67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 87.269656][ T5389] RAX: ffffffffffffffda RBX: 00007f1f61795fa0 RCX: 00007f1f6150e159 [ 87.269693][ T5389] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 87.269792][ T5389] RBP: 00007f1f615a5024 R08: 0000000000000000 R09: 0000000000000000 [ 87.269881][ T5389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.269915][ T5389] R13: 00007f1f61796038 R14: 00007f1f61795fa0 R15: 00007ffeac3b91e8 [ 87.269957][ T5389] [ 87.286022][ T5389] syz.2.657: vmalloc error: size 12288, failed to allocated page array size 24, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 87.286196][ T5389] CPU: 0 UID: 0 PID: 5389 Comm: syz.2.657 Not tainted syzkaller #0 PREEMPT(lazy) [ 87.286358][ T5389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.286406][ T5389] Call Trace: [ 87.286427][ T5389] [ 87.286449][ T5389] __dump_stack+0x1d/0x30 [ 87.286529][ T5389] dump_stack_lvl+0x95/0xd0 [ 87.286608][ T5389] dump_stack+0x15/0x1b [ 87.286680][ T5389] warn_alloc+0x146/0x1c0 [ 87.286797][ T5389] ? should_failslab+0x8c/0xb0 [ 87.286908][ T5389] __vmalloc_node_range_noprof+0x70d/0x1000 [ 87.287061][ T5389] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 87.287166][ T5389] ? n_tty_open+0x1d/0xd0 [ 87.287279][ T5389] vzalloc_noprof+0x82/0xb0 [ 87.287367][ T5389] ? n_tty_open+0x1d/0xd0 [ 87.287479][ T5389] n_tty_open+0x1d/0xd0 [ 87.287601][ T5389] tty_ldisc_setup+0x83/0x220 [ 87.287685][ T5389] tty_init_dev+0x183/0x320 [ 87.287756][ T5389] ptmx_open+0xda/0x240 [ 87.287812][ T5389] chrdev_open+0x2eb/0x3a0 [ 87.287921][ T5389] do_dentry_open+0x49f/0xa60 [ 87.288002][ T5389] ? __pfx_chrdev_open+0x10/0x10 [ 87.288137][ T5389] ? may_open+0x1ee/0x350 [ 87.288211][ T5389] vfs_open+0x37/0x1e0 [ 87.288339][ T5389] path_openat+0xc01/0x10d0 [ 87.288396][ T5389] do_file_open+0x16c/0x290 [ 87.288470][ T5389] do_sys_openat2+0xa0/0x130 [ 87.288619][ T5389] __x64_sys_openat+0xf2/0x120 [ 87.288682][ T5389] x64_sys_call+0x1f72/0x2550 [ 87.288750][ T5389] do_syscall_64+0x112/0x360 [ 87.288899][ T5389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.288960][ T5389] RIP: 0033:0x7f1f6150e159 [ 87.289085][ T5389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.289136][ T5389] RSP: 002b:00007f1f5ff67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 87.289190][ T5389] RAX: ffffffffffffffda RBX: 00007f1f61795fa0 RCX: 00007f1f6150e159 [ 87.289322][ T5389] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 87.289359][ T5389] RBP: 00007f1f615a5024 R08: 0000000000000000 R09: 0000000000000000 [ 87.289393][ T5389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.289431][ T5389] R13: 00007f1f61796038 R14: 00007f1f61795fa0 R15: 00007ffeac3b91e8 [ 87.289489][ T5389] [ 87.300800][ T5391] loop1: detected capacity change from 0 to 512 [ 87.304824][ T5389] Mem-Info: [ 87.304833][ T5389] active_anon:7785 inactive_anon:2 isolated_anon:0 [ 87.304833][ T5389] active_file:3024 inactive_file:26167 isolated_file:0 [ 87.304833][ T5389] unevictable:0 dirty:266 writeback:0 [ 87.304833][ T5389] slab_reclaimable:3306 slab_unreclaimable:17496 [ 87.304833][ T5389] mapped:29471 shmem:225 pagetables:3217 [ 87.304833][ T5389] sec_pagetables:0 bounce:0 [ 87.304833][ T5389] kernel_misc_reclaimable:0 [ 87.304833][ T5389] free:1836254 free_pcp:29313 free_cma:0 [ 87.311188][ T5389] Node 0 active_anon:31140kB inactive_anon:8kB active_file:12096kB inactive_file:104668kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117884kB dirty:1064kB writeback:0kB shmem:900kB kernel_stack:3920kB pagetables:12868kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 87.311341][ T5389] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 87.311584][ T5389] lowmem_reserve[]: 0 2877 7856 7856 [ 87.311664][ T5389] Node 0 DMA32 free:2946904kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946904kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 87.311889][ T5389] lowmem_reserve[]: 0 0 4978 4978 [ 87.311968][ T5389] Node 0 Normal free:4382752kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:31140kB inactive_anon:8kB active_file:12096kB inactive_file:104668kB unevictable:0kB writepending:1060kB zspages:0kB present:5242880kB managed:5098228kB mlocked:0kB bounce:0kB free_pcp:117248kB local_pcp:98480kB free_cma:0kB [ 87.312239][ T5389] lowmem_reserve[]: 0 0 0 0 [ 87.312320][ T5389] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 87.312734][ T5389] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 1*256kB (M) 4*512kB (M) 5*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2946904kB [ 87.313276][ T5389] Node 0 Normal: 1142*4kB (UM) 307*8kB (M) 40*16kB (M) 3*32kB (M) 5*64kB (UME) 2*128kB (UE) 1*256kB (M) 1*512kB (M) 5*1024kB (U) 5*2048kB (UME) 1064*4096kB (UM) = 4382608kB [ 87.313936][ T5389] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 87.313950][ T5389] 29427 total pagecache pages [ 87.313976][ T5389] 15 pages in swap cache [ 87.313989][ T5389] Free swap = 124768kB [ 87.314013][ T5389] Total swap = 124996kB [ 87.314038][ T5389] 2097051 pages RAM [ 87.316391][ T5391] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.658: iget: bad i_size value: 38620345925642 [ 87.316482][ T5391] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.316969][ T5391] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.658: couldn't read orphan inode 15 (err -117) [ 87.317084][ T5391] loop1: lost filesystem error report for type 5 error -117 [ 87.322222][ T5391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.341844][ T5389] 0 pages HighMem/MovableOnly [ 87.341875][ T5389] 81928 pages reserved [ 87.341968][ T5389] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 87.345040][ T29] audit: type=1400 audit(1788729691.884:1295): avc: denied { write } for pid=5390 comm="syz.1.658" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.365859][ T29] audit: type=1400 audit(1788729691.904:1296): avc: denied { write } for pid=5390 comm="syz.1.658" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.365897][ T29] audit: type=1400 audit(1788729691.904:1297): avc: denied { remove_name } for pid=5390 comm="syz.1.658" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.365969][ T29] audit: type=1400 audit(1788729691.904:1298): avc: denied { rmdir } for pid=5390 comm="syz.1.658" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 87.472961][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.119878][ T5406] loop3: detected capacity change from 0 to 512 [ 88.182383][ T5406] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 88.182637][ T5406] EXT4-fs (loop3): orphan cleanup on readonly fs [ 88.185009][ T5406] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.185351][ T5406] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 88.192360][ T5406] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.662: bg 0: block 15: invalid block bitmap [ 88.192460][ T5406] loop3: lost filesystem error report for type 5 error -117 [ 88.193413][ T5406] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 88.193658][ T5406] loop3: lost filesystem error report for type 5 error -117 [ 88.198482][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 88.198529][ C0] EXT4-fs (loop3): initial error at time 1788729692: ext4_validate_block_bitmap:436 [ 88.198615][ C0] EXT4-fs (loop3): last error at time 1788729692: ext4_mb_clear_bb:6680 [ 88.205870][ T5406] EXT4-fs warning (device loop3): ext4_evict_inode:196: inode #16: comm syz.3.662: data will be lost [ 88.206241][ T5406] EXT4-fs (loop3): 1 truncate cleaned up [ 88.228488][ T5406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.347770][ T5370] kexec: Could not allocate control_code_buffer [ 88.416317][ T5415] sctp: [Deprecated]: syz.0.666 (pid 5415) Use of struct sctp_assoc_value in delayed_ack socket option. [ 88.416317][ T5415] Use struct sctp_sack_info instead [ 88.435105][ T5415] loop0: detected capacity change from 0 to 512 [ 88.451025][ T5415] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 88.470504][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.543373][ T5425] loop0: detected capacity change from 0 to 2048 [ 88.569927][ T5425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.608018][ T5435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.671'. [ 88.608072][ T5435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 88.608090][ T5435] IPv6: NLM_F_CREATE should be set when creating new route [ 88.611864][ T5433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.673'. [ 88.746288][ T5442] loop4: detected capacity change from 0 to 512 [ 88.751338][ T5442] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.676: corrupted in-inode xattr: invalid ea_ino [ 88.751461][ T5442] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 88.751914][ T5442] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.676: couldn't read orphan inode 15 (err -117) [ 88.751991][ T5442] loop4: lost filesystem error report for type 5 error -117 [ 88.753079][ T5442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.780561][ T5442] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 13: comm syz.4.676: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 88.834640][ T5442] xt_hashlimit: size too large, truncated to 1048576 [ 88.874880][ T5422] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 88.880719][ T5422] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 88.880894][ T5422] EXT4-fs (loop0): This should not happen!! Data will be lost [ 88.880894][ T5422] [ 88.880950][ T5422] EXT4-fs (loop0): Total free blocks count 0 [ 88.881001][ T5422] EXT4-fs (loop0): Free/Dirty block details [ 88.881094][ T5422] EXT4-fs (loop0): free_blocks=4096 [ 88.881121][ T5422] EXT4-fs (loop0): dirty_blocks=64 [ 88.881153][ T5422] EXT4-fs (loop0): Block reservation details [ 88.881207][ T5422] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 88.957412][ T190] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 89.863671][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.971675][ T5465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 90.048660][ T5448] kexec: Could not allocate control_code_buffer [ 90.172268][ T5467] loop4: detected capacity change from 0 to 736 [ 90.195027][ T5471] xt_policy: output policy not valid in PREROUTING and INPUT [ 90.269348][ T5467] rock: directory entry would overflow storage [ 90.269423][ T5467] rock: sig=0x3b10, size=4, remaining=3 [ 91.175518][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 91.175546][ T29] audit: type=1326 audit(1788729695.714:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.1.694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d3fae159 code=0x7ffc0000 [ 91.210206][ T29] audit: type=1326 audit(1788729695.754:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.1.694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f41d3fae159 code=0x7ffc0000 [ 91.289777][ T29] audit: type=1326 audit(1788729695.834:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.1.694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d3fae159 code=0x7ffc0000 [ 91.289811][ T29] audit: type=1326 audit(1788729695.834:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.1.694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d3fae159 code=0x7ffc0000 [ 91.361686][ T5503] FAULT_INJECTION: forcing a failure. [ 91.361686][ T5503] name failslab, interval 1, probability 0, space 0, times 0 [ 91.361796][ T5503] CPU: 1 UID: 0 PID: 5503 Comm: syz.3.700 Not tainted syzkaller #0 PREEMPT(lazy) [ 91.361880][ T5503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.361895][ T5503] Call Trace: [ 91.361901][ T5503] [ 91.361932][ T5503] __dump_stack+0x1d/0x30 [ 91.361959][ T5503] dump_stack_lvl+0x95/0xd0 [ 91.361982][ T5503] dump_stack+0x15/0x1b [ 91.362003][ T5503] should_fail_ex+0x262/0x280 [ 91.362027][ T5503] should_failslab+0x8c/0xb0 [ 91.362082][ T5503] __kmalloc_node_noprof+0xdb/0x500 [ 91.362132][ T5503] ? __vmalloc_node_range_noprof+0x3ef/0x1000 [ 91.362165][ T5503] ? __vmalloc_node_range_noprof+0x3ef/0x1000 [ 91.362201][ T5503] __vmalloc_node_range_noprof+0x3ef/0x1000 [ 91.362235][ T5503] ? klist_next+0x22/0x220 [ 91.362273][ T5503] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 91.362357][ T5503] ? n_tty_open+0x1d/0xd0 [ 91.362391][ T5503] vzalloc_noprof+0x82/0xb0 [ 91.362431][ T5503] ? n_tty_open+0x1d/0xd0 [ 91.362470][ T5503] n_tty_open+0x1d/0xd0 [ 91.362566][ T5503] tty_ldisc_setup+0x83/0x220 [ 91.362596][ T5503] tty_init_dev+0x183/0x320 [ 91.362698][ T5503] ptmx_open+0xda/0x240 [ 91.362794][ T5503] chrdev_open+0x2eb/0x3a0 [ 91.362949][ T5503] do_dentry_open+0x49f/0xa60 [ 91.363019][ T5503] ? __pfx_chrdev_open+0x10/0x10 [ 91.363202][ T5503] ? may_open+0x1ee/0x350 [ 91.363281][ T5503] vfs_open+0x37/0x1e0 [ 91.363337][ T5503] path_openat+0xc01/0x10d0 [ 91.363431][ T5503] do_file_open+0x16c/0x290 [ 91.363581][ T5503] do_sys_openat2+0xa0/0x130 [ 91.363643][ T5503] __x64_sys_openat+0xf2/0x120 [ 91.363712][ T5503] x64_sys_call+0x1f72/0x2550 [ 91.363783][ T5503] do_syscall_64+0x112/0x360 [ 91.363920][ T5503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.363989][ T5503] RIP: 0033:0x7fafd27be159 [ 91.364042][ T5503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.364094][ T5503] RSP: 002b:00007fafd1217028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 91.364153][ T5503] RAX: ffffffffffffffda RBX: 00007fafd2a45fa0 RCX: 00007fafd27be159 [ 91.364263][ T5503] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 91.364305][ T5503] RBP: 00007fafd2855024 R08: 0000000000000000 R09: 0000000000000000 [ 91.364340][ T5503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.364384][ T5503] R13: 00007fafd2a46038 R14: 00007fafd2a45fa0 R15: 00007ffe5527fb68 [ 91.364445][ T5503] [ 91.367552][ T5504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.698'. [ 91.367955][ T5503] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 91.642893][ T5507] xt_policy: output policy not valid in PREROUTING and INPUT [ 91.665162][ T5512] syzkaller0: entered promiscuous mode [ 91.665263][ T5512] syzkaller0: entered allmulticast mode [ 91.678175][ T5508] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 91.783237][ T5524] netlink: 'syz.3.709': attribute type 13 has an invalid length. [ 91.783989][ T5524] gretap0: refused to change device tx_queue_len [ 91.784015][ T5524] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 91.823874][ T29] audit: type=1400 audit(1788729696.364:1306): avc: denied { listen } for pid=5515 comm="syz.4.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.901918][ T5529] FAULT_INJECTION: forcing a failure. [ 91.901918][ T5529] name failslab, interval 1, probability 0, space 0, times 0 [ 91.901968][ T5529] CPU: 1 UID: 0 PID: 5529 Comm: syz.4.711 Not tainted syzkaller #0 PREEMPT(lazy) [ 91.901999][ T5529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.902016][ T5529] Call Trace: [ 91.902024][ T5529] [ 91.902050][ T5529] __dump_stack+0x1d/0x30 [ 91.902083][ T5529] dump_stack_lvl+0x95/0xd0 [ 91.902173][ T5529] dump_stack+0x15/0x1b [ 91.902258][ T5529] should_fail_ex+0x262/0x280 [ 91.902342][ T5529] should_failslab+0x8c/0xb0 [ 91.902453][ T5529] __kmalloc_node_noprof+0xdb/0x500 [ 91.902554][ T5529] ? __vmalloc_node_range_noprof+0x3ef/0x1000 [ 91.902663][ T5529] ? __vmalloc_node_range_noprof+0x3ef/0x1000 [ 91.902816][ T5529] __vmalloc_node_range_noprof+0x3ef/0x1000 [ 91.902959][ T5529] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 91.903078][ T5529] ? n_tty_open+0x1d/0xd0 [ 91.903191][ T5529] vzalloc_noprof+0x82/0xb0 [ 91.903284][ T5529] ? n_tty_open+0x1d/0xd0 [ 91.903404][ T5529] n_tty_open+0x1d/0xd0 [ 91.903541][ T5529] tty_ldisc_setup+0x83/0x220 [ 91.903615][ T5529] tty_init_dev+0x183/0x320 [ 91.903696][ T5529] ptmx_open+0xda/0x240 [ 91.903842][ T5529] chrdev_open+0x2eb/0x3a0 [ 91.903951][ T5529] do_dentry_open+0x49f/0xa60 [ 91.904012][ T5529] ? __pfx_chrdev_open+0x10/0x10 [ 91.904106][ T5529] ? may_open+0x1ee/0x350 [ 91.904186][ T5529] vfs_open+0x37/0x1e0 [ 91.904242][ T5529] path_openat+0xc01/0x10d0 [ 91.904449][ T5529] do_file_open+0x16c/0x290 [ 91.904595][ T5529] do_sys_openat2+0xa0/0x130 [ 91.904675][ T5529] __x64_sys_openat+0xf2/0x120 [ 91.904755][ T5529] x64_sys_call+0x1f72/0x2550 [ 91.904873][ T5529] do_syscall_64+0x112/0x360 [ 91.904980][ T5529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.905060][ T5529] RIP: 0033:0x7f461c83e159 [ 91.905126][ T5529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.905229][ T5529] RSP: 002b:00007f461b297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 91.905292][ T5529] RAX: ffffffffffffffda RBX: 00007f461cac5fa0 RCX: 00007f461c83e159 [ 91.905342][ T5529] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 91.905542][ T5529] RBP: 00007f461c8d5024 R08: 0000000000000000 R09: 0000000000000000 [ 91.905591][ T5529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.905642][ T5529] R13: 00007f461cac6038 R14: 00007f461cac5fa0 R15: 00007fff8abed7a8 [ 91.905724][ T5529] [ 91.914811][ T5529] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 92.280437][ T29] audit: type=1400 audit(1788729696.824:1307): avc: denied { write } for pid=5540 comm="syz.1.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.344041][ T5547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.353036][ T5547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.375204][ T5545] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.719'. [ 92.375276][ T5545] netlink: zone id is out of range [ 92.375516][ T5545] netlink: zone id is out of range [ 92.376456][ T5545] netlink: zone id is out of range [ 92.376850][ T5545] netlink: zone id is out of range [ 92.407272][ T5545] netlink: zone id is out of range [ 92.407298][ T5545] netlink: zone id is out of range [ 92.407327][ T5545] netlink: zone id is out of range [ 92.407346][ T5545] netlink: zone id is out of range [ 92.407355][ T5545] netlink: zone id is out of range [ 92.771431][ T5560] netlink: 'syz.2.723': attribute type 13 has an invalid length. [ 92.783269][ T5560] gretap0: refused to change device tx_queue_len [ 92.931796][ T29] audit: type=1400 audit(1788729697.474:1308): avc: denied { getopt } for pid=5554 comm="syz.1.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.994456][ T5574] loop2: detected capacity change from 0 to 512 [ 93.003805][ T5574] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 93.014953][ T5574] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 93.015088][ T5574] EXT4-fs (loop2): orphan cleanup on readonly fs [ 93.033697][ T5574] EXT4-fs error (device loop2): ext4_quota_enable:7256: comm syz.2.725: Bad quota inum: 3, type: 1 [ 93.033732][ T5574] loop2: lost filesystem error report for type 5 error -117 [ 93.044583][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 93.044608][ C0] EXT4-fs (loop2): initial error at time 1788729697: ext4_quota_enable:7256 [ 93.044646][ C0] EXT4-fs (loop2): last error at time 1788729697: ext4_quota_enable:7256 [ 93.078654][ T5574] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=3). Please run e2fsck to fix. [ 93.078740][ T5574] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 93.079217][ T5574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.121601][ T5578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.121716][ T5578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.151170][ T29] audit: type=1400 audit(1788729697.694:1310): avc: denied { write } for pid=5565 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.151607][ T29] audit: type=1400 audit(1788729697.694:1309): avc: denied { nlmsg_read } for pid=5579 comm="syz.3.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.224146][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.252453][ T29] audit: type=1400 audit(1788729697.794:1311): avc: denied { write } for pid=5588 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.298731][ T5591] loop2: detected capacity change from 0 to 512 [ 93.311104][ T5591] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.730: corrupted in-inode xattr: invalid ea_ino [ 93.311134][ T5591] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.311390][ T5591] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.730: couldn't read orphan inode 15 (err -117) [ 93.311414][ T5591] loop2: lost filesystem error report for type 5 error -117 [ 93.314030][ T5591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.424297][ T5591] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 13: comm syz.2.730: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 93.493318][ T5591] xt_hashlimit: size too large, truncated to 1048576 [ 93.762043][ T5613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.762128][ T5613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.229946][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.932151][ T5627] loop0: detected capacity change from 0 to 512 [ 94.978380][ T5627] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.746: inode has both inline data and extents flags [ 94.978675][ T5627] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.980586][ T5627] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.746: couldn't read orphan inode 15 (err -117) [ 94.980674][ T5627] loop0: lost filesystem error report for type 5 error -117 [ 94.992327][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 94.992353][ C1] EXT4-fs (loop0): initial error at time 1788729699: ext4_orphan_get:1403: inode 15 [ 94.992390][ C1] EXT4-fs (loop0): last error at time 1788729699: ext4_orphan_get:1408 [ 95.453926][ T5627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.499954][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.580462][ T5646] loop0: detected capacity change from 0 to 1024 [ 95.580909][ T5646] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.593226][ T5646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.666411][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.677823][ T11] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.679031][ T11] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 95.770821][ T3427] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.793810][ T5665] loop1: detected capacity change from 0 to 128 [ 95.799271][ T5665] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 95.799394][ T5665] FAT-fs (loop1): data area starts beyond volume (36 > 6) [ 95.799442][ T5665] FAT-fs (loop1): Can't find a valid FAT filesystem [ 95.846442][ T5665] loop1: detected capacity change from 0 to 128 [ 95.854859][ T5665] vfat: Unknown parameter 'proc' [ 95.862167][ T3427] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.943767][ T3427] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.970587][ T5669] fido_id[5669]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.006066][ T3427] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.017169][ T5661] loop2: detected capacity change from 0 to 1764 [ 96.195737][ T3427] bridge_slave_1: left allmulticast mode [ 96.195784][ T3427] bridge_slave_1: left promiscuous mode [ 96.195962][ T3427] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.203827][ T3427] bridge_slave_0: left allmulticast mode [ 96.203884][ T3427] bridge_slave_0: left promiscuous mode [ 96.204212][ T3427] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.290408][ T3427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.301082][ T3427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.311219][ T3427] bond0 (unregistering): Released all slaves [ 96.374964][ T3427] hsr_slave_0: left promiscuous mode [ 96.381138][ T3427] hsr_slave_1: left promiscuous mode [ 96.381552][ T3427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.381574][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.403632][ T3427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.403671][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.422505][ T3427] veth1_macvtap: left promiscuous mode [ 96.422564][ T3427] veth0_macvtap: left promiscuous mode [ 96.422706][ T3427] veth1_vlan: left promiscuous mode [ 96.422825][ T3427] veth0_vlan: left promiscuous mode [ 96.467692][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 96.467714][ T29] audit: type=1400 audit(1788729701.004:1337): avc: denied { write } for pid=5696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.506103][ T29] audit: type=1400 audit(1788729701.044:1338): avc: denied { write } for pid=5708 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.583617][ T3427] team0 (unregistering): Port device team_slave_1 removed [ 96.588105][ T3427] team0 (unregistering): Port device team_slave_0 removed [ 96.634491][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 96.649576][ T5712] netlink: 'syz.3.768': attribute type 21 has an invalid length. [ 96.649599][ T5712] netlink: 128 bytes leftover after parsing attributes in process `syz.3.768'. [ 96.649671][ T5712] netlink: 'syz.3.768': attribute type 5 has an invalid length. [ 96.649683][ T5712] netlink: 'syz.3.768': attribute type 6 has an invalid length. [ 96.649710][ T5712] netlink: 3 bytes leftover after parsing attributes in process `syz.3.768'. [ 96.668147][ T29] audit: type=1400 audit(1788729701.214:1339): avc: denied { create } for pid=5711 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 96.725887][ T5712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.768'. [ 96.765819][ T5719] netlink: 'syz.4.757': attribute type 13 has an invalid length. [ 96.778029][ T5719] gretap0: refused to change device tx_queue_len [ 96.787515][ T5671] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.787555][ T5671] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.787652][ T5671] bridge_slave_0: entered allmulticast mode [ 96.788111][ T5671] bridge_slave_0: entered promiscuous mode [ 96.816296][ T5671] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.816338][ T5671] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.816463][ T5671] bridge_slave_1: entered allmulticast mode [ 96.817043][ T5671] bridge_slave_1: entered promiscuous mode [ 96.860345][ T5671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.861479][ T5671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.916905][ T29] audit: type=1400 audit(1788729701.454:1340): avc: denied { write } for pid=5716 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.944271][ T5671] team0: Port device team_slave_0 added [ 96.945978][ T3427] IPVS: stop unused estimator thread 0... [ 96.952948][ T5733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.953236][ T5733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.973689][ T5671] team0: Port device team_slave_1 added [ 97.005062][ T29] audit: type=1400 audit(1788729701.544:1341): avc: denied { write } for pid=5734 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.009932][ T5671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.009967][ T5671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.010063][ T5671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.011284][ T5671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.011313][ T5671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.017543][ T5671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.065549][ T5671] hsr_slave_0: entered promiscuous mode [ 97.065995][ T5671] hsr_slave_1: entered promiscuous mode [ 97.140655][ T5727] Cannot find add_set index 0 as target [ 97.164456][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 97.246440][ T5671] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.256435][ T5671] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.257856][ T5671] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.267695][ T5671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.269225][ T5671] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.275883][ T5671] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.282028][ T5671] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.294701][ T5671] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.319603][ T5671] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.319649][ T5671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.319930][ T5671] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.320088][ T5671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.365844][ T5671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.374585][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.375416][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.391486][ T29] audit: type=1400 audit(1788729701.934:1342): avc: denied { write } for pid=5738 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.419469][ T5671] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.427352][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.427416][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.434479][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.434512][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.467480][ T29] audit: type=1400 audit(1788729702.004:1343): avc: denied { write } for pid=5755 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.521049][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 97.747367][ T29] audit: type=1400 audit(1788729702.264:1344): avc: denied { write } for pid=5762 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.749111][ T29] audit: type=1400 audit(1788729702.294:1345): avc: denied { write } for pid=5784 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.780894][ T5787] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 97.933511][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 98.328582][ T5671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.522786][ T5671] veth0_vlan: entered promiscuous mode [ 98.526954][ T5671] veth1_vlan: entered promiscuous mode [ 98.551105][ T5671] veth0_macvtap: entered promiscuous mode [ 98.556554][ T5671] veth1_macvtap: entered promiscuous mode [ 98.575084][ T5671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.578065][ T5671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.615982][ T29] audit: type=1400 audit(1788729703.154:1346): avc: denied { mounton } for pid=5671 comm="syz-executor" path="/root/syzkaller.s8rnxL/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 98.650237][ T51] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.650428][ T51] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.650583][ T51] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.650693][ T51] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.887694][ T5840] netlink: 'syz.4.772': attribute type 21 has an invalid length. [ 98.887721][ T5840] netlink: 128 bytes leftover after parsing attributes in process `syz.4.772'. [ 98.887809][ T5840] netlink: 'syz.4.772': attribute type 5 has an invalid length. [ 98.887824][ T5840] netlink: 'syz.4.772': attribute type 6 has an invalid length. [ 98.887879][ T5840] netlink: 3 bytes leftover after parsing attributes in process `syz.4.772'. [ 98.915903][ T5841] loop1: detected capacity change from 0 to 512 [ 98.946917][ T5841] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.770: corrupted in-inode xattr: invalid ea_ino [ 98.947027][ T5841] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 98.950690][ T5841] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.770: couldn't read orphan inode 15 (err -117) [ 98.950786][ T5841] loop1: lost filesystem error report for type 5 error -117 [ 98.954868][ T5841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.965829][ T5840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.772'. [ 99.018977][ T5847] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.773'. [ 99.019010][ T5847] net_ratelimit: 260 callbacks suppressed [ 99.019039][ T5847] netlink: zone id is out of range [ 99.019059][ T5847] netlink: zone id is out of range [ 99.019086][ T5847] netlink: zone id is out of range [ 99.019127][ T5847] netlink: zone id is out of range [ 99.019985][ T5847] netlink: zone id is out of range [ 99.019994][ T5847] netlink: zone id is out of range [ 99.020075][ T5847] netlink: zone id is out of range [ 99.020083][ T5847] netlink: zone id is out of range [ 99.020101][ T5847] netlink: zone id is out of range [ 99.020108][ T5847] netlink: zone id is out of range [ 99.023974][ T5841] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 13: comm syz.1.770: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 99.040431][ T5841] xt_hashlimit: size too large, truncated to 1048576 [ 99.210901][ T5850] loop3: detected capacity change from 0 to 512 [ 99.231533][ T5854] netlink: 'syz.2.776': attribute type 10 has an invalid length. [ 99.253302][ T5850] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.774: inode has both inline data and extents flags [ 99.253418][ T5850] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.253959][ T5850] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.774: couldn't read orphan inode 15 (err -117) [ 99.254025][ T5850] loop3: lost filesystem error report for type 5 error -117 [ 99.286407][ T5850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.325433][ T5854] team0 (unregistering): Port device team_slave_0 removed [ 99.342640][ T5857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.778'. [ 99.355292][ T5854] team0 (unregistering): Port device team_slave_1 removed [ 99.397431][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.501181][ T5861] loop3: detected capacity change from 0 to 1024 [ 99.529397][ T5861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.553129][ T5861] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 99.553389][ T5861] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 99.561308][ T5861] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 99.561345][ T5861] EXT4-fs (loop3): This should not happen!! Data will be lost [ 99.561345][ T5861] [ 99.561367][ T5861] EXT4-fs (loop3): Total free blocks count 0 [ 99.561385][ T5861] EXT4-fs (loop3): Free/Dirty block details [ 99.561432][ T5861] EXT4-fs (loop3): free_blocks=20480 [ 99.561449][ T5861] EXT4-fs (loop3): dirty_blocks=80 [ 99.561466][ T5861] EXT4-fs (loop3): Block reservation details [ 99.561481][ T5861] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 99.613081][ T5861] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 99.938927][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.178668][ T5899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.178887][ T5899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.257823][ T5888] loop1: detected capacity change from 0 to 1764 [ 100.392972][ T5906] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 100.731320][ T5922] loop3: detected capacity change from 0 to 512 [ 100.740735][ T5922] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.804: corrupted in-inode xattr: invalid ea_ino [ 100.740794][ T5922] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.741226][ T5922] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.804: couldn't read orphan inode 15 (err -117) [ 100.741310][ T5922] loop3: lost filesystem error report for type 5 error -117 [ 100.742598][ T5922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.788478][ T5922] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 13: comm syz.3.804: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 100.832387][ T5922] xt_hashlimit: size too large, truncated to 1048576 [ 101.038080][ T5946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.038215][ T5946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.152394][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.280505][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.819'. [ 102.335100][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.820'. [ 102.543571][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 102.543652][ T29] audit: type=1400 audit(1788729707.084:1371): avc: denied { create } for pid=6014 comm="syz.1.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 102.640991][ T6025] lo: entered allmulticast mode [ 102.859723][ T6023] loop4: detected capacity change from 0 to 1764 [ 102.890262][ T6034] loop3: detected capacity change from 0 to 8192 [ 103.841238][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.835'. [ 104.015057][ T6050] netlink: 1355 bytes leftover after parsing attributes in process `syz.5.836'. [ 104.092476][ T6052] FAULT_INJECTION: forcing a failure. [ 104.092476][ T6052] name failslab, interval 1, probability 0, space 0, times 0 [ 104.092534][ T6052] CPU: 1 UID: 0 PID: 6052 Comm: syz.3.838 Not tainted syzkaller #0 PREEMPT(lazy) [ 104.092640][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.092652][ T6052] Call Trace: [ 104.092658][ T6052] [ 104.092666][ T6052] __dump_stack+0x1d/0x30 [ 104.092723][ T6052] dump_stack_lvl+0x95/0xd0 [ 104.092797][ T6052] dump_stack+0x15/0x1b [ 104.092870][ T6052] should_fail_ex+0x262/0x280 [ 104.092976][ T6052] should_failslab+0x8c/0xb0 [ 104.093070][ T6052] __kmalloc_node_noprof+0xdb/0x500 [ 104.093154][ T6052] ? init_srcu_struct_fields+0x5d8/0x650 [ 104.093319][ T6052] ? blk_mq_alloc_tag_set+0x399/0x640 [ 104.093401][ T6052] ? blk_mq_alloc_tag_set+0x399/0x640 [ 104.093431][ T6052] blk_mq_alloc_tag_set+0x399/0x640 [ 104.093574][ T6052] ? __pfx_loop_control_ioctl+0x10/0x10 [ 104.093673][ T6052] loop_add+0x267/0x580 [ 104.093770][ T6052] ? __pfx_loop_control_ioctl+0x10/0x10 [ 104.093973][ T6052] loop_control_ioctl+0xd0/0x3f0 [ 104.094067][ T6052] ? __pfx_loop_control_ioctl+0x10/0x10 [ 104.094201][ T6052] __se_sys_ioctl+0xce/0x140 [ 104.094318][ T6052] __x64_sys_ioctl+0x43/0x50 [ 104.094432][ T6052] x64_sys_call+0x239d/0x2550 [ 104.094524][ T6052] do_syscall_64+0x112/0x360 [ 104.094658][ T6052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.094727][ T6052] RIP: 0033:0x7fafd27be159 [ 104.094782][ T6052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.094894][ T6052] RSP: 002b:00007fafd1217028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.095023][ T6052] RAX: ffffffffffffffda RBX: 00007fafd2a45fa0 RCX: 00007fafd27be159 [ 104.095069][ T6052] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000005 [ 104.095107][ T6052] RBP: 00007fafd2855024 R08: 0000000000000000 R09: 0000000000000000 [ 104.095145][ T6052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.095183][ T6052] R13: 00007fafd2a46038 R14: 00007fafd2a45fa0 R15: 00007ffe5527fb68 [ 104.095256][ T6052] [ 104.333935][ T6067] loop2: detected capacity change from 0 to 512 [ 104.381572][ T6075] netlink: 'syz.2.847': attribute type 21 has an invalid length. [ 104.381611][ T6075] netlink: 128 bytes leftover after parsing attributes in process `syz.2.847'. [ 104.381668][ T6075] netlink: 'syz.2.847': attribute type 5 has an invalid length. [ 104.381687][ T6075] netlink: 'syz.2.847': attribute type 6 has an invalid length. [ 104.381705][ T6075] netlink: 3 bytes leftover after parsing attributes in process `syz.2.847'. [ 104.425363][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'. [ 104.475486][ T6076] netlink: 'syz.5.846': attribute type 10 has an invalid length. [ 104.482195][ T29] audit: type=1400 audit(1788729709.014:1372): avc: denied { bind } for pid=6077 comm="syz.1.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.482259][ T29] audit: type=1400 audit(1788729709.014:1373): avc: denied { name_bind } for pid=6077 comm="syz.1.848" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 104.490793][ T29] audit: type=1400 audit(1788729709.034:1374): avc: denied { node_bind } for pid=6077 comm="syz.1.848" saddr=fe88::102 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 104.570370][ T6076] team0 (unregistering): Port device team_slave_0 removed [ 104.587335][ T6076] team0 (unregistering): Port device team_slave_1 removed [ 104.721056][ T6088] loop4: detected capacity change from 0 to 2048 [ 104.762838][ T6088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.762916][ T6088] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.820384][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.194572][ T6104] syz_tun: entered allmulticast mode [ 105.202517][ T6104] dvmrp6: entered allmulticast mode [ 105.210429][ T6102] syz_tun: left allmulticast mode [ 105.647764][ T6120] syzkaller0: entered promiscuous mode [ 105.647790][ T6120] syzkaller0: entered allmulticast mode [ 105.706087][ T29] audit: type=1400 audit(1788729710.244:1375): avc: denied { sys_module } for pid=6123 comm="syz.5.863" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 105.852491][ T6142] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 105.928944][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 105.929084][ T6145] netlink: 32 bytes leftover after parsing attributes in process `syz.3.872'. [ 106.079227][ T6158] loop3: detected capacity change from 0 to 1024 [ 106.101043][ T6158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.102947][ T29] audit: type=1400 audit(1788729710.644:1376): avc: denied { write } for pid=6157 comm="syz.3.878" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.106750][ T6158] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 106.119645][ T6158] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 106.121403][ T6158] EXT4-fs (loop3): This should not happen!! Data will be lost [ 106.121403][ T6158] [ 106.121454][ T6158] EXT4-fs (loop3): Total free blocks count 0 [ 106.121503][ T6158] EXT4-fs (loop3): Free/Dirty block details [ 106.121543][ T6158] EXT4-fs (loop3): free_blocks=20480 [ 106.121650][ T6158] EXT4-fs (loop3): dirty_blocks=80 [ 106.121699][ T6158] EXT4-fs (loop3): Block reservation details [ 106.121745][ T6158] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 106.133427][ T6157] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 106.282689][ T6164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.282840][ T6164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.442012][ T29] audit: type=1400 audit(1788729710.984:1377): avc: denied { connect } for pid=6168 comm="syz.4.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.615423][ T6181] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.833923][ T29] audit: type=1400 audit(1788729711.374:1378): avc: denied { mounton } for pid=6189 comm="syz.4.890" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 107.198624][ T6210] syzkaller0: entered promiscuous mode [ 107.198675][ T6210] syzkaller0: entered allmulticast mode [ 107.236647][ T29] audit: type=1400 audit(1788729711.774:1379): avc: denied { write } for pid=6201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.299167][ T29] audit: type=1400 audit(1788729711.844:1380): avc: denied { write } for pid=6224 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.474349][ T6230] loop2: detected capacity change from 0 to 512 [ 107.507763][ T6230] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.901: corrupted in-inode xattr: invalid ea_ino [ 107.521771][ T6230] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 107.524542][ T6230] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.901: couldn't read orphan inode 15 (err -117) [ 107.524742][ T6230] loop2: lost filesystem error report for type 5 error -117 [ 107.534754][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 107.534787][ C1] EXT4-fs (loop2): initial error at time 1788729712: ext4_iget_extra_inode:5210: inode 15 [ 107.534850][ C1] EXT4-fs (loop2): last error at time 1788729712: ext4_orphan_get:1408 [ 107.590661][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 107.590685][ T29] audit: type=1400 audit(1788729712.134:1383): avc: denied { write } for pid=6248 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.598618][ T6230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.651171][ T29] audit: type=1400 audit(1788729712.194:1384): avc: denied { write } for pid=6228 comm="syz.2.901" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.747823][ T6250] loop5: detected capacity change from 0 to 736 [ 107.761306][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.823151][ T6253] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.165682][ T6265] syz_tun: entered allmulticast mode [ 108.176916][ T6265] dvmrp6: entered allmulticast mode [ 108.185235][ T6263] syz_tun: left allmulticast mode [ 108.289823][ T6269] syzkaller0: entered promiscuous mode [ 108.289892][ T6269] syzkaller0: entered allmulticast mode [ 108.294169][ T29] audit: type=1400 audit(1788729712.834:1385): avc: denied { view } for pid=6270 comm="syz.4.914" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 108.528613][ T29] audit: type=1400 audit(1788729713.064:1386): avc: denied { write } for pid=6272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.654649][ T29] audit: type=1400 audit(1788729713.194:1387): avc: denied { write } for pid=6292 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.927818][ T29] audit: type=1400 audit(1788729713.464:1388): avc: denied { write } for pid=6299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.967336][ T29] audit: type=1400 audit(1788729713.504:1389): avc: denied { write } for pid=6310 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.535671][ T6321] loop4: detected capacity change from 0 to 128 [ 109.539564][ T6321] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.540261][ T6321] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.561080][ T29] audit: type=1400 audit(1788729714.104:1390): avc: denied { write } for pid=6317 comm="syz.4.934" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.568946][ T29] audit: type=1400 audit(1788729714.114:1391): avc: denied { listen } for pid=6313 comm="syz.5.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.649652][ T6325] loop5: detected capacity change from 0 to 512 [ 109.673742][ T6325] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.922: corrupted in-inode xattr: invalid ea_ino [ 109.673782][ T6325] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 109.687209][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 109.687233][ C0] EXT4-fs (loop5): initial error at time 1788729714: ext4_iget_extra_inode:5210: inode 15 [ 109.687282][ C0] EXT4-fs (loop5): last error at time 1788729714: ext4_iget_extra_inode:5210: inode 15 [ 109.687886][ T6325] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.922: couldn't read orphan inode 15 (err -117) [ 109.687914][ T6325] loop5: lost filesystem error report for type 5 error -117 [ 109.688500][ T6325] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.841138][ T29] audit: type=1400 audit(1788729714.374:1392): avc: denied { write } for pid=6324 comm="syz.5.922" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.847230][ T6325] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 13: comm syz.5.922: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 109.886239][ T6330] netlink: 'syz.1.923': attribute type 10 has an invalid length. [ 109.907157][ T6325] xt_hashlimit: size too large, truncated to 1048576 [ 109.930350][ T6330] team0 (unregistering): Port device team_slave_0 removed [ 109.946133][ T6330] team0 (unregistering): Port device team_slave_1 removed [ 110.154092][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.271316][ T6370] syzkaller0: entered promiscuous mode [ 110.271352][ T6370] syzkaller0: entered allmulticast mode [ 110.321472][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.930'. [ 110.501555][ T6380] FAULT_INJECTION: forcing a failure. [ 110.501555][ T6380] name fail_futex, interval 1, probability 0, space 0, times 1 [ 110.501596][ T6380] CPU: 0 UID: 0 PID: 6380 Comm: syz.4.937 Not tainted syzkaller #0 PREEMPT(lazy) [ 110.501625][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.501638][ T6380] Call Trace: [ 110.501644][ T6380] [ 110.501691][ T6380] __dump_stack+0x1d/0x30 [ 110.501715][ T6380] dump_stack_lvl+0x95/0xd0 [ 110.501736][ T6380] dump_stack+0x15/0x1b [ 110.501755][ T6380] should_fail_ex+0x262/0x280 [ 110.501781][ T6380] should_fail+0xb/0x20 [ 110.501849][ T6380] get_futex_key+0x12d/0xb10 [ 110.501961][ T6380] futex_wake+0x89/0x400 [ 110.501995][ T6380] do_futex+0x3f8/0x460 [ 110.502028][ T6380] ? mutex_unlock+0x4e/0x90 [ 110.502117][ T6380] __se_sys_futex+0x2f6/0x370 [ 110.502153][ T6380] __x64_sys_futex+0x78/0x90 [ 110.502181][ T6380] x64_sys_call+0x22e2/0x2550 [ 110.502205][ T6380] do_syscall_64+0x112/0x360 [ 110.502308][ T6380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.502333][ T6380] RIP: 0033:0x7f461c83e159 [ 110.502351][ T6380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.502373][ T6380] RSP: 002b:00007f461b2970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 110.502441][ T6380] RAX: ffffffffffffffda RBX: 00007f461cac5fa8 RCX: 00007f461c83e159 [ 110.502457][ T6380] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f461cac5fac [ 110.502473][ T6380] RBP: 00007f461cac5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 110.502488][ T6380] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 110.502502][ T6380] R13: 00007f461cac6038 R14: 00007fff8abed6c0 R15: 00007fff8abed7a8 [ 110.502539][ T6380] [ 110.701510][ T6382] tipc: Failed to remove unknown binding: 66,0,0/0:3364206608/3364206610 [ 110.701544][ T6382] tipc: Failed to remove unknown binding: 66,0,0/0:3364206608/3364206609 [ 110.701741][ T6382] tipc: Failed to remove unknown binding: 66,0,0/0:3364206608/3364206610 [ 110.701895][ T6382] tipc: Failed to remove unknown binding: 66,0,0/0:3364206608/3364206609 [ 110.832549][ T5671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.862087][ T6384] loop4: detected capacity change from 0 to 512 [ 110.933605][ T6384] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.938: corrupted in-inode xattr: invalid ea_ino [ 110.933787][ T6384] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 110.947867][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 110.947892][ C0] EXT4-fs (loop4): initial error at time 1788729715: ext4_iget_extra_inode:5210: inode 15 [ 110.947931][ C0] EXT4-fs (loop4): last error at time 1788729715: ext4_iget_extra_inode:5210: inode 15 [ 110.982135][ T6384] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.938: couldn't read orphan inode 15 (err -117) [ 110.982255][ T6384] loop4: lost filesystem error report for type 5 error -117 [ 111.021145][ T6384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.096365][ T6397] netlink: 'syz.3.943': attribute type 10 has an invalid length. [ 111.112609][ T6397] team0 (unregistering): Port device team_slave_0 removed [ 111.121082][ T6397] team0 (unregistering): Port device team_slave_1 removed [ 111.171326][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.321666][ T5055] Process accounting resumed [ 111.480867][ T6420] loop3: detected capacity change from 0 to 512 [ 111.489417][ T6412] loop5: detected capacity change from 0 to 512 [ 111.543846][ T6420] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 111.548945][ T6412] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.960: corrupted in-inode xattr: invalid ea_ino [ 111.549059][ T6412] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.550632][ T6412] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.960: couldn't read orphan inode 15 (err -117) [ 111.550709][ T6412] loop5: lost filesystem error report for type 5 error -117 [ 111.555772][ T6412] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.590392][ T6420] EXT4-fs (loop3): orphan cleanup on readonly fs [ 111.591894][ T6420] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 111.592198][ T6420] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 111.592746][ T6420] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #16: comm syz.3.951: inode has both inline data and extents flags [ 111.592827][ T6420] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 111.593449][ T6420] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.951: couldn't read orphan inode 16 (err -117) [ 111.593520][ T6420] loop3: lost filesystem error report for type 5 error -117 [ 111.594982][ T6420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.711872][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.737136][ T5671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.772824][ T6429] loop3: detected capacity change from 0 to 512 [ 111.791378][ T6429] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.952: corrupted in-inode xattr: invalid ea_ino [ 111.791408][ T6429] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.791575][ T6429] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.952: couldn't read orphan inode 15 (err -117) [ 111.791616][ T6429] loop3: lost filesystem error report for type 5 error -117 [ 111.804937][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 111.804962][ C0] EXT4-fs (loop3): initial error at time 1788729716: ext4_iget_extra_inode:5210: inode 15 [ 111.804998][ C0] EXT4-fs (loop3): last error at time 1788729716: ext4_orphan_get:1408 [ 111.805547][ T6429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.886815][ T6432] netlink: 'syz.5.953': attribute type 1 has an invalid length. [ 111.947473][ T6432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.960302][ T6429] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 13: comm syz.3.952: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 111.986418][ T6437] xt_hashlimit: size too large, truncated to 1048576 [ 112.033699][ T6433] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 112.143047][ T6439] FAULT_INJECTION: forcing a failure. [ 112.143047][ T6439] name failslab, interval 1, probability 0, space 0, times 0 [ 112.143141][ T6439] CPU: 1 UID: 0 PID: 6439 Comm: syz.4.957 Not tainted syzkaller #0 PREEMPT(lazy) [ 112.143169][ T6439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.143190][ T6439] Call Trace: [ 112.143199][ T6439] [ 112.143209][ T6439] __dump_stack+0x1d/0x30 [ 112.143242][ T6439] dump_stack_lvl+0x95/0xd0 [ 112.143336][ T6439] dump_stack+0x15/0x1b [ 112.143364][ T6439] should_fail_ex+0x262/0x280 [ 112.143528][ T6439] ? security_perf_event_alloc+0x48/0x120 [ 112.143570][ T6439] should_failslab+0x8c/0xb0 [ 112.143642][ T6439] __kmalloc_noprof+0xd0/0x4d0 [ 112.143704][ T6439] ? security_perf_event_alloc+0x48/0x120 [ 112.143750][ T6439] security_perf_event_alloc+0x48/0x120 [ 112.143792][ T6439] perf_event_alloc+0x186a/0x19e0 [ 112.143874][ T6439] __se_sys_perf_event_open+0x674/0x1280 [ 112.143914][ T6439] ? do_futex+0x391/0x460 [ 112.143947][ T6439] __x64_sys_perf_event_open+0x67/0x80 [ 112.143985][ T6439] x64_sys_call+0x1f25/0x2550 [ 112.144097][ T6439] do_syscall_64+0x112/0x360 [ 112.144147][ T6439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.144178][ T6439] RIP: 0033:0x7f461c83e159 [ 112.144196][ T6439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.144224][ T6439] RSP: 002b:00007f461b297028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 112.144252][ T6439] RAX: ffffffffffffffda RBX: 00007f461cac5fa0 RCX: 00007f461c83e159 [ 112.144273][ T6439] RDX: ffffffbfffffffff RSI: 0000000000000000 RDI: 00002000000000c0 [ 112.144292][ T6439] RBP: 00007f461c8d5024 R08: 0000000000000000 R09: 0000000000000000 [ 112.144317][ T6439] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 112.144331][ T6439] R13: 00007f461cac6038 R14: 00007f461cac5fa0 R15: 00007fff8abed7a8 [ 112.144350][ T6439] [ 112.580768][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.220920][ T6451] loop4: detected capacity change from 0 to 736 [ 113.895011][ T6470] syzkaller0: entered promiscuous mode [ 113.895092][ T6470] syzkaller0: entered allmulticast mode [ 114.030311][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 114.030333][ T29] audit: type=1400 audit(1788729718.574:1401): avc: denied { read } for pid=6488 comm="syz.5.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.155395][ T6495] loop4: detected capacity change from 0 to 512 [ 114.171311][ T6495] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.973: corrupted in-inode xattr: invalid ea_ino [ 114.171343][ T6495] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 114.184690][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 114.184725][ C1] EXT4-fs (loop4): initial error at time 1788729718: ext4_iget_extra_inode:5210: inode 15 [ 114.184775][ C1] EXT4-fs (loop4): last error at time 1788729718: ext4_iget_extra_inode:5210: inode 15 [ 114.226062][ T6495] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.973: couldn't read orphan inode 15 (err -117) [ 114.226104][ T6495] loop4: lost filesystem error report for type 5 error -117 [ 114.239682][ T6495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.384899][ T29] audit: type=1400 audit(1788729718.924:1402): avc: denied { write } for pid=6494 comm="syz.4.973" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.429029][ T6495] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 13: comm syz.4.973: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 114.523707][ T6495] xt_hashlimit: size too large, truncated to 1048576 [ 114.738269][ T29] audit: type=1400 audit(1788729719.274:1403): avc: denied { create } for pid=6508 comm="syz.1.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.758280][ T29] audit: type=1400 audit(1788729719.284:1404): avc: denied { bind } for pid=6508 comm="syz.1.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.758379][ T29] audit: type=1400 audit(1788729719.284:1405): avc: denied { write } for pid=6508 comm="syz.1.979" path="socket:[15898]" dev="sockfs" ino=15898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.122279][ T6511] loop3: detected capacity change from 0 to 512 [ 115.202456][ T6518] loop1: detected capacity change from 0 to 736 [ 115.311958][ T6511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.312580][ T6511] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.355952][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.505669][ T6527] netlink: 'syz.5.984': attribute type 21 has an invalid length. [ 115.505696][ T6527] netlink: 128 bytes leftover after parsing attributes in process `syz.5.984'. [ 115.505805][ T6527] netlink: 'syz.5.984': attribute type 5 has an invalid length. [ 115.505824][ T6527] netlink: 'syz.5.984': attribute type 6 has an invalid length. [ 115.505837][ T6527] netlink: 3 bytes leftover after parsing attributes in process `syz.5.984'. [ 115.553969][ T6524] netlink: 'syz.2.985': attribute type 1 has an invalid length. [ 115.568865][ T6527] netlink: 12 bytes leftover after parsing attributes in process `syz.5.984'. [ 115.600594][ T6524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.647908][ T6528] netlink: 'syz.4.986': attribute type 10 has an invalid length. [ 115.667830][ T6533] snd_hda_intel 0000:00:00.0: Unknown PCI class/subclass/prog-if information (0x060000) found, selecting HDAudio legacy driver [ 115.667871][ T6533] snd_hda_intel 0000:00:00.0: Too small PCI BAR0 [ 115.667894][ T6533] snd_hda_intel 0000:00:00.0: probe with driver snd_hda_intel failed with error -22 [ 115.668086][ T6533] snd_hda_intel 0000:00:01.0: Unknown PCI class/subclass/prog-if information (0x060100) found, selecting HDAudio legacy driver [ 115.668105][ T6533] snd_hda_intel 0000:00:01.0: Too small PCI BAR0 [ 115.668117][ T6533] snd_hda_intel 0000:00:01.0: probe with driver snd_hda_intel failed with error -22 [ 115.668271][ T6533] snd_hda_intel 0000:00:01.3: Unknown PCI class/subclass/prog-if information (0x068000) found, selecting HDAudio legacy driver [ 115.668316][ T6533] snd_hda_intel 0000:00:01.3: Too small PCI BAR0 [ 115.668395][ T6533] snd_hda_intel 0000:00:01.3: probe with driver snd_hda_intel failed with error -22 [ 115.690405][ T6528] team0 (unregistering): Port device team_slave_0 removed [ 115.762501][ T29] audit: type=1400 audit(1788729720.304:1406): avc: denied { wake_alarm } for pid=6531 comm="syz.1.987" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 115.768898][ T6528] team0 (unregistering): Port device team_slave_1 removed [ 115.810970][ T6524] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 116.009496][ T6544] tipc: Failed to remove unknown binding: 66,0,0/0:4043426735/4043426736 [ 116.018590][ T6544] tipc: Failed to remove unknown binding: 66,0,0/0:4043426735/4043426736 [ 116.061143][ T6547] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4294967295 (only 8 groups) [ 116.269993][ T29] audit: type=1400 audit(1788729720.814:1407): avc: denied { setattr } for pid=6510 comm="syz.3.980" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.301858][ T6551] loop1: detected capacity change from 0 to 512 [ 116.314954][ T6551] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.994: corrupted in-inode xattr: invalid ea_ino [ 116.314994][ T6551] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 116.328347][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 116.328378][ C1] EXT4-fs (loop1): initial error at time 1788729720: ext4_iget_extra_inode:5210: inode 15 [ 116.328432][ C1] EXT4-fs (loop1): last error at time 1788729720: ext4_iget_extra_inode:5210: inode 15 [ 116.364212][ T6551] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.994: couldn't read orphan inode 15 (err -117) [ 116.364250][ T6551] loop1: lost filesystem error report for type 5 error -117 [ 116.376574][ T6551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.430270][ T29] audit: type=1400 audit(1788729720.974:1408): avc: denied { write } for pid=6550 comm="syz.1.994" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.456038][ T6551] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 13: comm syz.1.994: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 116.498322][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.552629][ T6563] net_ratelimit: 257 callbacks suppressed [ 116.552670][ T6563] TC_ACT_REPEAT abuse ? [ 116.569426][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.691455][ T6561] loop4: detected capacity change from 0 to 512 [ 116.736731][ T6561] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 116.747248][ T6561] EXT4-fs (loop4): orphan cleanup on readonly fs [ 116.758898][ T6561] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 116.759269][ T6561] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 116.792530][ T6561] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 116.802096][ T6561] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #16: comm syz.4.997: inode has both inline data and extents flags [ 116.802528][ T6561] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 116.821785][ T6561] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.997: couldn't read orphan inode 16 (err -117) [ 116.821874][ T6561] loop4: lost filesystem error report for type 5 error -117 [ 116.831871][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 116.831905][ C1] EXT4-fs (loop4): initial error at time 1788729721: ext4_orphan_get:1403: inode 16 [ 116.831932][ C1] EXT4-fs (loop4): last error at time 1788729721: ext4_orphan_get:1408 [ 116.909202][ T6561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.981223][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.016642][ T6576] netlink: 'syz.4.1001': attribute type 1 has an invalid length. [ 117.029353][ T29] audit: type=1326 audit(1788729721.574:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.2.1011" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f6150e159 code=0x0 [ 117.063566][ T6576] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.097473][ T6576] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 117.305422][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1007'. [ 118.007132][ T6616] snd_hda_intel 0000:00:00.0: Unknown PCI class/subclass/prog-if information (0x060000) found, selecting HDAudio legacy driver [ 118.007171][ T6616] snd_hda_intel 0000:00:00.0: Too small PCI BAR0 [ 118.007196][ T6616] snd_hda_intel 0000:00:00.0: probe with driver snd_hda_intel failed with error -22 [ 118.007369][ T6616] snd_hda_intel 0000:00:01.0: Unknown PCI class/subclass/prog-if information (0x060100) found, selecting HDAudio legacy driver [ 118.007392][ T6616] snd_hda_intel 0000:00:01.0: Too small PCI BAR0 [ 118.007412][ T6616] snd_hda_intel 0000:00:01.0: probe with driver snd_hda_intel failed with error -22 [ 118.007476][ T6616] snd_hda_intel 0000:00:01.3: Unknown PCI class/subclass/prog-if information (0x068000) found, selecting HDAudio legacy driver [ 118.007564][ T6616] snd_hda_intel 0000:00:01.3: Too small PCI BAR0 [ 118.007579][ T6616] snd_hda_intel 0000:00:01.3: probe with driver snd_hda_intel failed with error -22 [ 118.024388][ T6611] loop5: detected capacity change from 0 to 512 [ 118.074182][ T6611] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 118.074484][ T6611] EXT4-fs (loop5): orphan cleanup on readonly fs [ 118.082237][ T6611] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 118.085120][ T6611] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 118.085520][ T6611] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #16: comm syz.5.1012: inode has both inline data and extents flags [ 118.085794][ T6611] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 118.086650][ T6611] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1012: couldn't read orphan inode 16 (err -117) [ 118.086896][ T6611] loop5: lost filesystem error report for type 5 error -117 [ 118.111787][ T6611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.210819][ T6624] netlink: 'syz.1.1018': attribute type 1 has an invalid length. [ 118.219062][ T5671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.241183][ T6624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.273127][ T6624] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 118.515172][ T6645] loop1: detected capacity change from 0 to 512 [ 118.525405][ T6645] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 118.555408][ T6645] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 118.555607][ T6645] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 118.790807][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1025'. [ 120.185642][ T6686] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1038'. [ 120.353304][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 120.353384][ T29] audit: type=1400 audit(1788729724.894:1414): avc: denied { ioctl } for pid=6691 comm="syz.3.1042" path="socket:[16493]" dev="sockfs" ino=16493 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.425199][ T6694] syzkaller0: entered promiscuous mode [ 120.425226][ T6694] syzkaller0: entered allmulticast mode [ 120.647192][ T6701] loop1: detected capacity change from 0 to 4096 [ 120.665859][ T6701] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.674828][ T6701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.075743][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.226933][ T6675] Set syz0 is full, maxelem 65536 reached [ 121.331156][ T6714] 0: reclassify loop, rule prio 0, protocol 03 [ 121.575203][ T6724] loop3: detected capacity change from 0 to 512 [ 121.593009][ T6724] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.1055: corrupted in-inode xattr: invalid ea_ino [ 121.593052][ T6724] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 121.606590][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 121.606637][ C1] EXT4-fs (loop3): initial error at time 1788729726: ext4_iget_extra_inode:5210: inode 15 [ 121.606669][ C1] EXT4-fs (loop3): last error at time 1788729726: ext4_iget_extra_inode:5210: inode 15 [ 121.606755][ T6724] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1055: couldn't read orphan inode 15 (err -117) [ 121.606790][ T6724] loop3: lost filesystem error report for type 5 error -117 [ 121.616490][ T6724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.638379][ T6726] loop2: detected capacity change from 0 to 8192 [ 121.804620][ T29] audit: type=1400 audit(1788729726.334:1415): avc: denied { write } for pid=6723 comm="syz.3.1055" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.830199][ T6724] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 13: comm syz.3.1055: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 121.989649][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.998952][ T6741] loop5: detected capacity change from 0 to 512 [ 122.008380][ T6741] EXT4-fs: Invalid want_extra_isize 1969 [ 122.015312][ T29] audit: type=1326 audit(1788729726.554:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.4.1051" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f461c83e159 code=0x0 [ 122.152726][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 123.436885][ T6777] TC_ACT_REPEAT abuse ? [ 123.958499][ T29] audit: type=1400 audit(1788729728.484:1417): avc: denied { write } for pid=6785 comm="syz.3.1077" name="id" dev="configfs" ino=17427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 123.958538][ T29] audit: type=1400 audit(1788729728.484:1418): avc: denied { open } for pid=6785 comm="syz.3.1077" path="/217/config/usb_gadget/g1/functions/midi.usb0/id" dev="configfs" ino=17427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 123.958571][ T29] audit: type=1400 audit(1788729728.484:1419): avc: denied { create } for pid=6785 comm="syz.3.1077" name="midi.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 124.228481][ T5224] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 126.597421][ T29] audit: type=1400 audit(1788729731.134:1420): avc: denied { mount } for pid=6790 comm="syz.3.1078" name="/" dev="hugetlbfs" ino=17440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 126.629288][ T6791] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.886619][ T6814] syzkaller0: entered promiscuous mode [ 126.886650][ T6814] syzkaller0: entered allmulticast mode [ 126.889733][ T6806] loop5: detected capacity change from 0 to 1024 [ 126.896787][ T6806] EXT4-fs: Ignoring removed bh option [ 126.941027][ T29] audit: type=1400 audit(1788729731.484:1421): avc: denied { ioctl } for pid=6817 comm="syz.3.1091" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 126.979563][ T6806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.996932][ T29] audit: type=1400 audit(1788729731.544:1422): avc: denied { write } for pid=6804 comm="syz.5.1085" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.025687][ T29] audit: type=1400 audit(1788729731.564:1423): avc: denied { write } for pid=6804 comm="syz.5.1085" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.071920][ T29] audit: type=1400 audit(1788729731.614:1424): avc: denied { mounton } for pid=6804 comm="syz.5.1085" path="/54/file1/proc" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 127.105531][ T6806] FAULT_INJECTION: forcing a failure. [ 127.105531][ T6806] name failslab, interval 1, probability 0, space 0, times 0 [ 127.105657][ T6806] CPU: 0 UID: 0 PID: 6806 Comm: syz.5.1085 Not tainted syzkaller #0 PREEMPT(lazy) [ 127.105710][ T6806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.105738][ T6806] Call Trace: [ 127.105748][ T6806] [ 127.105759][ T6806] __dump_stack+0x1d/0x30 [ 127.105788][ T6806] dump_stack_lvl+0x95/0xd0 [ 127.105869][ T6806] dump_stack+0x15/0x1b [ 127.105900][ T6806] should_fail_ex+0x262/0x280 [ 127.105933][ T6806] ? ext4_xattr_block_set+0x23b/0x1950 [ 127.105967][ T6806] should_failslab+0x8c/0xb0 [ 127.106040][ T6806] __kmalloc_noprof+0xd0/0x4d0 [ 127.106077][ T6806] ? ext4_xattr_block_set+0x23b/0x1950 [ 127.106113][ T6806] ext4_xattr_block_set+0x23b/0x1950 [ 127.106196][ T6806] ? memcmp+0x5e/0x90 [ 127.106254][ T6806] ext4_expand_extra_isize_ea+0xbc8/0x11a0 [ 127.106295][ T6806] __ext4_expand_extra_isize+0x246/0x280 [ 127.106330][ T6806] __ext4_mark_inode_dirty+0x2d8/0x410 [ 127.106420][ T6806] ext4_dirty_inode+0x92/0xc0 [ 127.106559][ T6806] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 127.106593][ T6806] __mark_inode_dirty+0x164/0x700 [ 127.106633][ T6806] file_update_time_flags+0x299/0x2d0 [ 127.106725][ T6806] kiocb_modified+0x59/0x70 [ 127.106754][ T6806] ext4_buffered_write_iter+0x1f5/0x480 [ 127.106804][ T6806] ext4_file_write_iter+0x36e/0x1020 [ 127.106897][ T6806] ? _raw_spin_unlock+0x9/0x30 [ 127.106966][ T6806] ? finish_task_switch+0x121/0x340 [ 127.107007][ T6806] ? avc_policy_seqno+0x15/0x30 [ 127.107035][ T6806] ? selinux_file_permission+0x1dc/0x310 [ 127.107136][ T6806] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 127.107190][ T6806] vfs_write+0x57f/0x9a0 [ 127.107232][ T6806] __x64_sys_pwrite64+0xfd/0x150 [ 127.107270][ T6806] x64_sys_call+0x23be/0x2550 [ 127.107321][ T6806] do_syscall_64+0x112/0x360 [ 127.107360][ T6806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.107398][ T6806] RIP: 0033:0x7f6d376be159 [ 127.107486][ T6806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.107518][ T6806] RSP: 002b:00007f6d36117028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 127.107539][ T6806] RAX: ffffffffffffffda RBX: 00007f6d37945fa0 RCX: 00007f6d376be159 [ 127.107553][ T6806] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000006 [ 127.107565][ T6806] RBP: 00007f6d37755024 R08: 0000000000000000 R09: 0000000000000000 [ 127.107629][ T6806] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 127.107647][ T6806] R13: 00007f6d37946038 R14: 00007f6d37945fa0 R15: 00007ffd3eb934a8 [ 127.107717][ T6806] [ 127.363342][ T29] audit: type=1400 audit(1788729731.914:1425): avc: denied { write } for pid=5671 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.369523][ T5671] EXT4-fs error (device loop5): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /54/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 127.373018][ T5671] EXT4-fs (loop5): Remounting filesystem read-only [ 127.396354][ T29] audit: type=1400 audit(1788729731.924:1426): avc: denied { write } for pid=5671 comm="syz-executor" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.396416][ T29] audit: type=1400 audit(1788729731.924:1427): avc: denied { write } for pid=5671 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.396483][ T29] audit: type=1400 audit(1788729731.924:1428): avc: denied { write } for pid=5671 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.396509][ T29] audit: type=1400 audit(1788729731.924:1429): avc: denied { write } for pid=5671 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.421327][ T5671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.469342][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1097'. [ 127.574982][ T6833] syzkaller0: entered promiscuous mode [ 127.575024][ T6833] syzkaller0: entered allmulticast mode [ 127.662674][ T6847] syzkaller0: entered promiscuous mode [ 127.662711][ T6847] syzkaller0: entered allmulticast mode [ 127.725709][ T6855] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1104'. [ 127.743203][ T6856] loop2: detected capacity change from 0 to 128 [ 127.802442][ T6855] selinux_netlink_send: 16 callbacks suppressed [ 127.802467][ T6855] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6855 comm=syz.5.1104 [ 129.207628][ T6886] loop1: detected capacity change from 0 to 512 [ 129.220161][ T6886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.220313][ T6886] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.260233][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.443244][ T6894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.443304][ T6894] IPv6: NLM_F_CREATE should be set when creating new route [ 130.632734][ T6840] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.681385][ T6899] netlink: 'syz.3.1119': attribute type 1 has an invalid length. [ 130.710597][ T6899] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 130.716543][ T6899] macvlan2: entered promiscuous mode [ 130.716595][ T6899] macvlan2: entered allmulticast mode [ 130.717244][ T6899] bond2: entered promiscuous mode [ 130.717669][ T6899] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 130.721653][ T6899] bond2: left promiscuous mode [ 131.730982][ T6931] netlink: 'syz.2.1130': attribute type 13 has an invalid length. [ 131.917087][ T6936] loop4: detected capacity change from 0 to 1764 [ 131.919374][ T6936] isofs_fill_super: get root inode failed [ 132.256698][ T6950] loop5: detected capacity change from 0 to 1024 [ 132.280214][ T6950] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 132.280685][ T6950] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 132.290503][ T6950] EXT4-fs error (device loop5): ext4_get_journal_inode:5927: inode #32: comm syz.5.1135: iget: special inode unallocated [ 132.290534][ T6950] loop5: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 132.292280][ T6950] EXT4-fs (loop5): Remounting filesystem read-only [ 132.292366][ T6950] EXT4-fs (loop5): no journal found [ 132.292396][ T6950] EXT4-fs (loop5): can't get journal size [ 132.294995][ T6950] EXT4-fs (loop5): filesystem is read-only [ 132.296395][ T6950] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 132.366688][ T5671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.495600][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 132.495635][ T29] audit: type=1400 audit(1788729737.034:1443): avc: denied { listen } for pid=6972 comm="syz.5.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.499111][ T29] audit: type=1400 audit(1788729737.044:1444): avc: denied { accept } for pid=6972 comm="syz.5.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.506243][ T6975] syzkaller0: entered promiscuous mode [ 132.506296][ T6975] syzkaller0: entered allmulticast mode [ 132.610177][ T6979] loop3: detected capacity change from 0 to 512 [ 132.613516][ T6979] EXT4-fs: Ignoring removed nobh option [ 132.622180][ T6979] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 132.622492][ T6979] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1147: attempt to clear invalid blocks 1 len 1 [ 132.622534][ T6979] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 132.622680][ T6979] EXT4-fs (loop3): Remounting filesystem read-only [ 132.622842][ T6979] EXT4-fs (loop3): 1 truncate cleaned up [ 132.623204][ T6979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.682127][ T29] audit: type=1400 audit(1788729737.224:1445): avc: denied { read write } for pid=6982 comm="syz.1.1148" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 132.682218][ T29] audit: type=1400 audit(1788729737.224:1446): avc: denied { open } for pid=6982 comm="syz.1.1148" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 132.787704][ T29] audit: type=1400 audit(1788729737.324:1447): avc: denied { bind } for pid=6984 comm="syz.4.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 132.797937][ T29] audit: type=1400 audit(1788729737.334:1448): avc: denied { connect } for pid=6984 comm="syz.4.1150" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.846347][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.858255][ T6989] netlink: 'syz.4.1151': attribute type 9 has an invalid length. [ 132.858282][ T6989] netlink: 399 bytes leftover after parsing attributes in process `syz.4.1151'. [ 132.894529][ T29] audit: type=1400 audit(1788729737.434:1449): avc: denied { write } for pid=6990 comm="syz.3.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 132.895048][ T29] audit: type=1400 audit(1788729737.434:1450): avc: denied { create } for pid=6992 comm="syz.1.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 133.016979][ T6996] loop3: detected capacity change from 0 to 512 [ 133.111089][ T6998] --map-set only usable from mangle table [ 133.255074][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1157'. [ 133.378012][ T29] audit: type=1400 audit(1788729737.914:1451): avc: denied { read } for pid=7010 comm="syz.5.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 133.403266][ T29] audit: type=1326 audit(1788729737.944:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.5.1160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d376be159 code=0x7ffc0000 [ 133.511808][ T7011] tipc: Trying to set illegal importance in message [ 133.648572][ T7032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.648673][ T7032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.668089][ T7032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.668173][ T7032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.409805][ T7058] loop2: detected capacity change from 0 to 256 [ 134.412445][ T7053] loop3: detected capacity change from 0 to 512 [ 134.457534][ T7053] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 134.462859][ T7053] EXT4-fs (loop3): orphan cleanup on readonly fs [ 134.462916][ T7053] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.1175: bad orphan inode 15 [ 134.462982][ T7053] loop3: lost filesystem error report for type 5 error -117 [ 134.468514][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 134.468566][ C1] EXT4-fs (loop3): initial error at time 1788729739: ext4_orphan_get:1429 [ 134.468635][ C1] EXT4-fs (loop3): last error at time 1788729739: ext4_orphan_get:1429 [ 134.469587][ T7053] ext4_test_bit(bit=14, block=5) = 0 [ 134.470680][ T7053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 134.572744][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.745774][ T7069] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1180'. [ 135.575293][ T7090] loop3: detected capacity change from 0 to 1024 [ 135.923044][ T7105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1194'. [ 136.095204][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1196'. [ 136.095229][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1196'. [ 136.487184][ T7121] loop1: detected capacity change from 0 to 512 [ 136.497920][ T7121] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 136.514171][ T7121] EXT4-fs (loop1): 1 truncate cleaned up [ 136.514630][ T7121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.537690][ T7121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.533759][ T7144] syzkaller0: entered promiscuous mode [ 137.533787][ T7144] syzkaller0: entered allmulticast mode [ 137.591004][ T7159] loop4: detected capacity change from 0 to 512 [ 137.606555][ T7159] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 137.660719][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'. [ 137.817278][ T7172] syzkaller0: entered promiscuous mode [ 137.817311][ T7172] syzkaller0: entered allmulticast mode [ 137.944367][ T7174] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1220'. [ 138.066479][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 138.066509][ T29] audit: type=1400 audit(1788729742.584:1590): avc: denied { firmware_load } for pid=7173 comm="syz.3.1220" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 138.116876][ T29] audit: type=1326 audit(1788729742.654:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7184 comm="syz.2.1225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6150e159 code=0x7ffc0000 [ 138.145312][ T29] audit: type=1326 audit(1788729742.684:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7184 comm="syz.2.1225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6150e159 code=0x7ffc0000 [ 138.145356][ T29] audit: type=1326 audit(1788729742.684:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7184 comm="syz.2.1225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6150e159 code=0x7ffc0000 [ 138.198187][ T29] audit: type=1326 audit(1788729742.734:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7184 comm="syz.2.1225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6150e159 code=0x7ffc0000 [ 138.198230][ T29] audit: type=1326 audit(1788729742.734:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7184 comm="syz.2.1225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1f6150dec2 code=0x7ffc0000 [ 138.198282][ T29] audit: type=1326 audit(1788729742.734:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7184 comm="syz.2.1225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1f6150df57 code=0x7ffc0000 [ 138.198335][ T29] audit: type=1326 audit(1788729742.734:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7184 comm="syz.2.1225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1f614cae51 code=0x7ffc0000 [ 138.198372][ T29] audit: type=1326 audit(1788729742.734:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7184 comm="syz.2.1225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f1f6150ef49 code=0x7ffc0000 [ 138.232395][ T29] audit: type=1326 audit(1788729742.734:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7184 comm="syz.2.1225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1f614caebb code=0x7ffc0000 [ 138.353347][ T7185] loop2: detected capacity change from 0 to 512 [ 138.381889][ T7185] EXT4-fs (loop2): 1 truncate cleaned up [ 138.382275][ T7185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.491996][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.578119][ T7198] --map-set only usable from mangle table [ 138.704664][ T7174] syz.3.1220 (7174) used greatest stack depth: 9728 bytes left [ 138.859044][ T7216] netlink: 'syz.5.1236': attribute type 1 has an invalid length. [ 138.888923][ T7216] bond2: entered promiscuous mode [ 138.889107][ T7216] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.932064][ T7216] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 138.932112][ T7216] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 138.932156][ T7216] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 138.999972][ T7221] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 139.000015][ T7221] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 139.045830][ T7219] loop1: detected capacity change from 0 to 512 [ 139.571945][ T7239] loop3: detected capacity change from 0 to 4096 [ 139.602548][ T7239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.834447][ T7239] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.1244: Failed to acquire dquot type 1 [ 139.924248][ T7202] Set syz0 is full, maxelem 65536 reached [ 139.980103][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.245066][ T7263] loop2: detected capacity change from 0 to 512 [ 140.261359][ T7263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.261431][ T7263] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.366560][ T7269] loop4: detected capacity change from 0 to 512 [ 140.395855][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.408028][ T7269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.408107][ T7269] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.514782][ T3427] Bluetooth: hci0: Frame reassembly failed (-84) [ 141.278912][ T7285] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1257'. [ 141.279761][ T7283] loop3: detected capacity change from 0 to 1024 [ 141.292973][ T7283] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 141.292973][ T7283] [ 141.393112][ T7289] bridge0: port 3(vxlan0) entered blocking state [ 141.393163][ T7289] bridge0: port 3(vxlan0) entered disabled state [ 141.393317][ T7289] vxlan0: entered allmulticast mode [ 141.393858][ T7289] vxlan0: entered promiscuous mode [ 141.608571][ T7301] 0: reclassify loop, rule prio 0, protocol 03 [ 142.106736][ T7311] loop5: detected capacity change from 0 to 512 [ 142.112036][ T7311] EXT4-fs: Ignoring removed nobh option [ 142.126803][ T7311] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 142.136819][ T7311] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1267: attempt to clear invalid blocks 1 len 1 [ 142.136860][ T7311] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 142.149907][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 142.149932][ C0] EXT4-fs (loop5): initial error at time 1788729746: ext4_clear_blocks:876: inode 13 [ 142.149980][ C0] EXT4-fs (loop5): last error at time 1788729746: ext4_clear_blocks:876: inode 13 [ 142.185568][ T7311] EXT4-fs (loop5): Remounting filesystem read-only [ 142.192511][ T7311] EXT4-fs (loop5): 1 truncate cleaned up [ 142.192961][ T7311] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.253484][ T5671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.525152][ T7320] loop3: detected capacity change from 0 to 256 [ 142.570957][ T5224] Bluetooth: hci0: command 0x1003 tx timeout [ 142.577290][ T3624] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 143.194854][ T7335] netlink: 'syz.5.1276': attribute type 83 has an invalid length. [ 143.214632][ T7338] ip_tables: iptables: counters copy to user failed while replacing table [ 143.351544][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.414833][ T7345] syzkaller0: entered promiscuous mode [ 143.414868][ T7345] syzkaller0: entered allmulticast mode [ 143.699776][ T7349] loop2: detected capacity change from 0 to 1024 [ 143.700881][ T7340] loop5: detected capacity change from 0 to 1024 [ 143.729765][ T7349] EXT4-fs: Ignoring removed bh option [ 143.812705][ T7349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.834192][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 143.834219][ T29] audit: type=1400 audit(1788729748.378:1714): avc: denied { write } for pid=7348 comm="syz.2.1279" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.870653][ T29] audit: type=1400 audit(1788729748.408:1715): avc: denied { write } for pid=7348 comm="syz.2.1279" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.895914][ T7349] FAULT_INJECTION: forcing a failure. [ 143.895914][ T7349] name failslab, interval 1, probability 0, space 0, times 0 [ 143.897709][ T7349] CPU: 1 UID: 0 PID: 7349 Comm: syz.2.1279 Not tainted syzkaller #0 PREEMPT(lazy) [ 143.897794][ T7349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.897839][ T7349] Call Trace: [ 143.897858][ T7349] [ 143.897938][ T7349] __dump_stack+0x1d/0x30 [ 143.898057][ T7349] dump_stack_lvl+0x95/0xd0 [ 143.898125][ T7349] dump_stack+0x15/0x1b [ 143.898190][ T7349] should_fail_ex+0x262/0x280 [ 143.898307][ T7349] ? ext4_xattr_block_set+0x23b/0x1950 [ 143.898382][ T7349] should_failslab+0x8c/0xb0 [ 143.898555][ T7349] __kmalloc_noprof+0xd0/0x4d0 [ 143.898704][ T7349] ? ext4_xattr_block_set+0x23b/0x1950 [ 143.898781][ T7349] ext4_xattr_block_set+0x23b/0x1950 [ 143.898929][ T7349] ? memcmp+0x5e/0x90 [ 143.899071][ T7349] ? memcmp+0x5e/0x90 [ 143.899211][ T7349] ext4_expand_extra_isize_ea+0xbc8/0x11a0 [ 143.899330][ T7349] __ext4_expand_extra_isize+0x246/0x280 [ 143.899438][ T7349] __ext4_mark_inode_dirty+0x2d8/0x410 [ 143.899597][ T7349] ext4_dirty_inode+0x92/0xc0 [ 143.899686][ T7349] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 143.899768][ T7349] __mark_inode_dirty+0x164/0x700 [ 143.899856][ T7349] file_update_time_flags+0x299/0x2d0 [ 143.900052][ T7349] kiocb_modified+0x59/0x70 [ 143.900148][ T7349] ext4_buffered_write_iter+0x1f5/0x480 [ 143.900243][ T7349] ext4_file_write_iter+0x36e/0x1020 [ 143.900372][ T7349] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 143.900444][ T7349] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 143.900550][ T7349] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 143.900670][ T7349] ? vfs_write+0x565/0x9a0 [ 143.900765][ T7349] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 143.900839][ T7349] vfs_write+0x57f/0x9a0 [ 143.900948][ T7349] __x64_sys_pwrite64+0xfd/0x150 [ 143.901099][ T7349] x64_sys_call+0x23be/0x2550 [ 143.901251][ T7349] do_syscall_64+0x112/0x360 [ 143.901353][ T7349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.901433][ T7349] RIP: 0033:0x7f1f6150e159 [ 143.901491][ T7349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.901554][ T7349] RSP: 002b:00007f1f5ff67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 143.901667][ T7349] RAX: ffffffffffffffda RBX: 00007f1f61795fa0 RCX: 00007f1f6150e159 [ 143.901718][ T7349] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000006 [ 143.901756][ T7349] RBP: 00007f1f615a5024 R08: 0000000000000000 R09: 0000000000000000 [ 143.901815][ T7349] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 143.901862][ T7349] R13: 00007f1f61796038 R14: 00007f1f61795fa0 R15: 00007ffeac3b91e8 [ 143.901989][ T7349] [ 144.040745][ T29] audit: type=1400 audit(1788729748.588:1716): avc: denied { write } for pid=3298 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.041052][ T3298] EXT4-fs error (device loop2): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /257/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 144.043864][ T3298] EXT4-fs (loop2): Remounting filesystem read-only [ 144.044856][ T29] audit: type=1400 audit(1788729748.588:1717): avc: denied { write } for pid=3298 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.044889][ T29] audit: type=1400 audit(1788729748.588:1718): avc: denied { write } for pid=3298 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.044965][ T29] audit: type=1400 audit(1788729748.588:1719): avc: denied { write } for pid=3298 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.044998][ T29] audit: type=1400 audit(1788729748.588:1720): avc: denied { write } for pid=3298 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.045031][ T29] audit: type=1400 audit(1788729748.588:1721): avc: denied { write } for pid=3298 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.045158][ T29] audit: type=1400 audit(1788729748.588:1722): avc: denied { write } for pid=3298 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.082796][ T29] audit: type=1400 audit(1788729748.628:1723): avc: denied { write } for pid=3298 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.085729][ T7358] loop1: detected capacity change from 0 to 1024 [ 144.087451][ T7358] EXT4-fs (loop1): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 144.094859][ T7358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.127320][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.245562][ T7358] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.1282: bg 0: block 153: padding at end of block bitmap is not set [ 144.407864][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.447513][ T7369] loop5: detected capacity change from 0 to 512 [ 144.453861][ T7366] loop4: detected capacity change from 0 to 512 [ 144.485347][ T7369] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.485560][ T7369] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.642378][ T7382] netlink: 'syz.2.1291': attribute type 9 has an invalid length. [ 144.642423][ T7382] netlink: 399 bytes leftover after parsing attributes in process `syz.2.1291'. [ 144.798071][ T5671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.814359][ T7382] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.889952][ T7392] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: 1 [ 144.889981][ T7392] ref_ctr increment failed for inode: 0x518 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888126bc8e00 [ 144.908086][ T7392] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: -1 [ 144.908161][ T7392] ref_ctr decrement failed for inode: 0x518 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888126bc8e00 [ 144.908245][ T7392] uprobe: syz.4.1295:7392 failed to unregister, leaking uprobe [ 144.912590][ T7382] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.948987][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1296'. [ 144.986680][ T7382] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.042588][ T7382] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.112131][ T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.118517][ T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.125913][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.133599][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.800441][ T7419] loop2: detected capacity change from 0 to 1024 [ 146.043823][ T7425] tipc: Trying to set illegal importance in message [ 146.186900][ T7438] loop3: detected capacity change from 0 to 512 [ 146.204249][ T7438] EXT4-fs (loop3): 1 truncate cleaned up [ 146.204686][ T7438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.381799][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.686342][ T7423] FAULT_INJECTION: forcing a failure. [ 146.686342][ T7423] name fail_futex, interval 1, probability 0, space 0, times 0 [ 146.686422][ T7423] CPU: 1 UID: 0 PID: 7423 Comm: syz.1.1307 Not tainted syzkaller #0 PREEMPT(lazy) [ 146.686511][ T7423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.686529][ T7423] Call Trace: [ 146.686537][ T7423] [ 146.686545][ T7423] __dump_stack+0x1d/0x30 [ 146.686571][ T7423] dump_stack_lvl+0x95/0xd0 [ 146.686597][ T7423] dump_stack+0x15/0x1b [ 146.686625][ T7423] should_fail_ex+0x262/0x280 [ 146.686655][ T7423] should_fail+0xb/0x20 [ 146.686682][ T7423] get_futex_key+0x12d/0xb10 [ 146.686724][ T7423] futex_wake+0x89/0x400 [ 146.686758][ T7423] ? perf_lock_task_context+0x24b/0x2c0 [ 146.686796][ T7423] do_futex+0x3f8/0x460 [ 146.686869][ T7423] mm_exit_exec_release+0xab/0x190 [ 146.686914][ T7423] exit_mm+0x37/0x1a0 [ 146.686972][ T7423] do_exit+0x438/0x1510 [ 146.687013][ T7423] do_group_exit+0xfe/0x140 [ 146.687090][ T7423] ? get_signal+0xe00/0xf10 [ 146.687209][ T7423] get_signal+0xe07/0xf10 [ 146.687262][ T7423] arch_do_signal_or_restart+0x96/0x480 [ 146.687389][ T7423] exit_to_user_mode_loop+0x15d/0x8c0 [ 146.687492][ T7423] do_syscall_64+0x212/0x360 [ 146.687614][ T7423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.687664][ T7423] RIP: 0033:0x7f41d3fae159 [ 146.687686][ T7423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.687714][ T7423] RSP: 002b:00007f41d29e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 146.687741][ T7423] RAX: fffffffffffffdfe RBX: 00007f41d4236090 RCX: 00007f41d3fae159 [ 146.687761][ T7423] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000040 [ 146.687779][ T7423] RBP: 00007f41d4045024 R08: 0000000000000000 R09: 0000000000000000 [ 146.687865][ T7423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.687883][ T7423] R13: 00007f41d4236128 R14: 00007f41d4236090 R15: 00007ffe2b154c08 [ 146.687911][ T7423] [ 147.157256][ T7455] syzkaller0: entered promiscuous mode [ 147.157284][ T7455] syzkaller0: entered allmulticast mode [ 147.357871][ T7464] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1322'. [ 147.358042][ T7457] loop1: detected capacity change from 0 to 1024 [ 147.559982][ T7472] loop2: detected capacity change from 0 to 1764 [ 147.584435][ T7472] isofs_fill_super: get root inode failed [ 148.659197][ T7498] loop3: detected capacity change from 0 to 8192 [ 148.977434][ T7500] ================================================================== [ 148.977486][ T7500] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 148.977527][ T7500] [ 148.977533][ T7500] write to 0xffff888107286ad4 of 4 bytes by task 7501 on cpu 0: [ 148.977548][ T7500] xas_set_mark+0x12b/0x140 [ 148.977574][ T7500] tag_pages_for_writeback+0xe3/0x2e0 [ 148.977599][ T7500] writeback_iter+0x332/0x7c0 [ 148.977623][ T7500] __mpage_writepages+0x8a/0x1370 [ 148.977651][ T7500] fat_writepages+0x26/0x30 [ 148.977679][ T7500] do_writepages+0x1b9/0x300 [ 148.977705][ T7500] file_write_and_wait_range+0x178/0x2f0 [ 148.977737][ T7500] simple_fsync_noflush+0x42/0x120 [ 148.977754][ T7500] fat_file_fsync+0x7e/0x100 [ 148.977779][ T7500] vfs_fsync_range+0xc5/0xe0 [ 148.977798][ T7500] generic_file_write_iter+0x1a3/0x1f0 [ 148.977822][ T7500] iter_file_splice_write+0x6a0/0xa60 [ 148.977853][ T7500] direct_splice_actor+0x158/0x280 [ 148.977884][ T7500] splice_direct_to_actor+0x2f9/0x680 [ 148.977941][ T7500] do_splice_direct+0x119/0x1a0 [ 148.977985][ T7500] do_sendfile+0x37d/0x640 [ 148.978009][ T7500] __x64_sys_sendfile64+0x105/0x150 [ 148.978052][ T7500] x64_sys_call+0x1015/0x2550 [ 148.978079][ T7500] do_syscall_64+0x112/0x360 [ 148.978117][ T7500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.978149][ T7500] [ 148.978157][ T7500] read to 0xffff888107286ad4 of 4 bytes by task 7500 on cpu 1: [ 148.978180][ T7500] xas_find_marked+0x602/0x650 [ 148.978231][ T7500] filemap_get_folios_tag+0xf7/0x400 [ 148.978264][ T7500] filemap_fdatawait_range+0x88/0x1e0 [ 148.978297][ T7500] __writeback_single_inode+0xd9/0x790 [ 148.978328][ T7500] writeback_single_inode+0x16d/0x410 [ 148.978361][ T7500] sync_inode_metadata+0x6e/0xa0 [ 148.978396][ T7500] simple_fsync_noflush+0xdb/0x120 [ 148.978433][ T7500] fat_file_fsync+0x7e/0x100 [ 148.978471][ T7500] vfs_fsync_range+0xc5/0xe0 [ 148.978500][ T7500] generic_file_write_iter+0x1a3/0x1f0 [ 148.978536][ T7500] iter_file_splice_write+0x6a0/0xa60 [ 148.978577][ T7500] direct_splice_actor+0x158/0x280 [ 148.978611][ T7500] splice_direct_to_actor+0x2f9/0x680 [ 148.978654][ T7500] do_splice_direct+0x119/0x1a0 [ 148.978687][ T7500] do_sendfile+0x37d/0x640 [ 148.978709][ T7500] __x64_sys_sendfile64+0x105/0x150 [ 148.978754][ T7500] x64_sys_call+0x1015/0x2550 [ 148.978790][ T7500] do_syscall_64+0x112/0x360 [ 148.978829][ T7500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.978859][ T7500] [ 148.978865][ T7500] value changed: 0x01000021 -> 0x02000021 [ 148.978882][ T7500] [ 148.978886][ T7500] Reported by Kernel Concurrency Sanitizer on: [ 148.978897][ T7500] CPU: 1 UID: 0 PID: 7500 Comm: syz.3.1335 Not tainted syzkaller #0 PREEMPT(lazy) [ 148.978922][ T7500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.978940][ T7500] ==================================================================